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Using This Manual 



This manual is designed to give you an introduction to the 

HP 64146A/B 7700 Series Emulator. This manual will also help define 

how these emulators differ from other HP 64700 Emulators. 

This manual will: 

■ give you an introduction to using the emulator 

■ explore various ways of applying the emulator to accomplish 
your tasks 

■ show you emulator commands which are specific to the 7700 
Series Emulator 

This manual will not: 

■ tell you how to use each and every emulator/analyzer 
command (refer to the User's Reference manual) 

For the most part, the HP 64 146 A and HP 64146B emulators all 
operate the same way. Differences of between the emulators are 
described where they exist. Both the HP 64146A and HP 64146B 
emulators will be referred to as the "HP 64146A/B 7700 Series 
emulator" or "7700 Series emulator". In the specific instances where 
HP 64146B emulator differs from HP 64146A emulator, it will be 
described as "HP 64146B emulator". 



Organization 

Chapter 1 

Chapter 2 

Chapter 3 

Chapter 4 
Appendix A 
Appendix B 



An introduction to the HP 64146A/B 7700 Series emulator features and 
how they can help you in developing new hardware and software. 

A brief introduction to using the HP 64146A/B 7700 Series Emulator. 
You will load and execute a short program, and make some 
measurements using the emulation analyzer. 

Configuring the emulator to adapt it to your specific measurement 
needs. 



How to plug the emulator probe into a target system. 

Using a foreground monitor program; advantages and disadvantages. 

7700 Series Emulator Specific Command Syntax 
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Introduction to the 7700 Series Emulator 



Introduction 



The topics in this chapter include: 

■ Purpose of the 7700 Series Emulator 

■ Features of the 7700 Series Emulator 



Purpose of the 
7700 Series 
Emulator 



Note 
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The HP 64146A/B 7700 Series Emulator is designed to replace the 
MELPS 7700 Series microprocessor in your target system so you can 
control operation of the processor in your application hardware 
(usually referred to as the target system). The emulator performs just 
like the MELPS 7700 Series microprocessor, but is a device that allows 
you to control the MELPS 7700 Series directly. These features allow 
you to easily debug software before any hardware is available, and ease 
the task of integrating hardware and software. 



In this manual, MELPS 7700 Series is referred to as 7700 Series. 
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Figure 1-1 . HP 64146 Emulator for MELPS 7700 Series 
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Supported A list of the supported 7700 Series microprocessors is shown in Table 
Microprocessors You need to purchase appropriate emulation pod and emulation 

processor. 



Processor Clock Emulation Emulation 

Processor Pod 

M37700/1 M2-xxxFP/SP I 8 | M37700SAFP | M37700T-HPD 

M2AxxxFP/SP I 16 | 

SFP/SP I 8 I I 
SAFP/SP | 16 I 
+ + | 

M37700/1 M4-xxxFP/SP I 8 | M37700S4AFP 

M4 AxxxFP / SP I 16 | | 

S4FP/SP | 8 I I 

S4AFP/SP I 16 I 

+ + + 

M37702/3 M2-xxxFP/SP I 8 | M37702S1AFP | M37702T-HPD 

M2AxxxFP/SP I 16 I 

S1FP/SP I 8 I 

S1AFP/SP | 16 | | 

+ + + 

M37702/3 M4 — xxxFP / SP I 8 | M37702S4AFP 

M4 AxxxFP / SP I 16 | 

S4FP/SP I 8 I I 

S4AFP/SP I 16 | 

+ + + 

M37702 M6LxxxFP | 8 | M37702S1BFP | M37702TL-HPD 

I | HP 641466-61002 

I | (64146B) 

+ + + 

M37702/3 M2BxxxFP/SP | 25 | M37702S1BFP | M37702TB-HPD 

S1BFP/SP I 25 | | HP 64146-61001 

+ + + (64146A) 

M37702/3 M4BxxxFP/SP I 25 | M37702S4BFP | HP 64146-61002 

S4BFP/SP I 25 | | (64146B) 

M6BxxxFP | 25 | 

+ + + 

M37704/5 M2-xxxFP/SP I 8 | M37704S1AFP | M37704T-HPD 

M2AxxxFP/SP I 16 I 

S1FP/SP I 8 I 

S1AFP/SP I 16 | 

+ + + 

M37704 M3BxxxFP | 25 | M37704M4BFP | M37704TB-HPD 

M3BxxxFP | 25 I 

+ + + 

M37710 M4BxxxFP | 25 | M37710M4BFP | M37710TL-HPD 

S4BFP | 25 I 

+ + + 

M37720 S1FP | 8 | M37720S1AFP | M37720T-HPD 

S1AFP | 16 I I 

+ + + 

M37730 S2FP/SP I 8 | M37730S2AFP | M37730T-HPD 

S2AFP/SP I 16 | 



Table 1-1. Supported Microprocessors 
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M37732 


S4FP/SP 
S4AFP/SP 


1 
1 

-+ — 


8 
16 


1 
1 

— 


M37732S4AFP 


1 
1 


M37732T-HPD 


M37780 


STJ/FP 


-+ — 


16 


— +_. 


M37780STJ 


- + - 

1 


M37780T-HPD 


M37781 


M4 Txxx J/FP 
E4TxxxJ/FP 


1 
1 

-+— 


16 
16 


1 
1 


M37781M4TJ 


- + - 

1 
1 

-+- 


M37781T-HPD 


M37795 


SJ 
STJ 


-+— 


8 
8 


— +_. 


M37795SJ 


1 
1 


M37795T-HPD 


M37796 


E4-xxxJ 
E4TxxxJ 


1 


CO CO 


— +_. 

1 


M37796E4 J 


- + 

1 







Table 1-1. Supported Microprocessors (Cont'd) 



The HP 64146A emulator is provided with the following items. 

■ HP 64146-61001 emulation pod with M37702S1BFP 
emulation processor 

■ Adaptor for M37703 processor 



The HP 64146B emulator is provided with the following items. 

■ HP 64146-61002 emulation pod with M37702S1BFP 
emulation processor 

■ Adaptor for M37703 processor 

As you can see from Table 1-1, the HP 64146A/B emulator can 
emulate M37702/3M2 and M37702/3S1 processor by default. These 
emulation pods can be used with clock up to 25 MHz. Also, HP 
64146B emulator can emulate M37702 M6L processor using default 
emulation pod, HP 64146-61002. 

To emulate other processors of 7700 Series, you need to purchase 
appropriate emulation pod and/or emulation processor. 

The HP 64146A/B #001 emulator is provided with no emulation pod. 
You need to purchase appropriate emulation pod and emulation 
processor listed in Table 1-1. 

To purchase emulation pod or emulation processor, contact the address 
listed in the manual provided with your emulation pod. 
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The list of supported microprocessors in Table 1-1 is not necessarily 
complete. To determine if your microprocessor is supported or not, 
contact Hewlett-Packard. 



Features of the This section introduces you to the features of the emulator. The 

YYOO Series chapters which follow show you how to use these features. 

Emulator 



ClOCk Speed The HP 64146-61001 and HP 64146-61002 emulation pod generate 

internal clock of 1 MHz. These emulation pods can be used with target 
system clock up to 25 MHz. 

The emulator can run with no wait state up to 25 MHz. When clock is 
faster than 16 MHz, you can use the emulator with one of the following 
methods. 

■ Insert one wait state by the RDY signal. The emulator can be 
configured to generate the RDY signal. Also, the emulator 
accepts RDY signal from the target system. 

■ Use the high speed access mode of the emulator. The 
emulator can run with no wait state. However, there is a 
limitation in the mapping of the emulation memory in this 
mode. Refer to Chapter 4 of this manual for more detail. 

The HP 64146A/B 7700 Series emulator is used with one of the 
following Emulation Memory Cards. 

■ HP 64726 A 1 28 K byte Emulation Memory C ard 

■ HP 64727 A 5 1 2K byte Emulation Memory C ard 

■ HP 64728 A 1M byte Emulation Memory Card 

■ HP 64729A 2M byte Emulation Memory Card 
The emulation memory can be configured into 256 byte blocks. A 
maximum of 16 ranges can be configured as emulation RAM (eram), 
emulation ROM (erom), target system RAM (tram), target system 
ROM (trom), or guarded memory (grd). The HP 64146A/B 7700 



Emulation memory 
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Series emulator will attempt to break to the emulation monitor upon 
accessing guarded memory; additionally, you can configure the 
emulator to break to the emulation monitor upon performing a write to 
ROM (which will stop a runaway program). 



Analysis The HP 64146A/B 7700 Series emulator is used with one of the 
following analyzers which allows you to trace code execution and 
processor activity. 

■ HP 64704 80-channel Emulation Bus Analyzer 

■ HP 64703 64-channel Emulation Bus Analyzer and 
16-channel State/Timing Analyzer 

■ HP 64794A/C/D 80-channel 8K/64K/256K Emulation Bus 
Analyzer 



The Emulation Bus Analyzer monitors the emulation processor using 
an internal analysis bus. The HP 64703 64-channel Emulation Bus 
Analyzer and 16-channel State/Timing Analyzer allows you to probe 
up to 16 different lines in your target system. 



Foreground or 
Background 
Emulation Monitor 



When you power up the emulator, or when you initialize it, the 
background monitor is used by default. You can also configure the 
emulator to use a foreground monitor. Before the background and 
foreground monitors are described, you should understand the function 
of the emulation monitor program. 



The Function of the Monitor Program 

The monitor program is the interface between the emulation system 
controller and the target system. The emulation system controller uses 
its own microprocessor to accept and execute emulation, system, and 
analysis commands. The monitor program is executed by the 
emulation processor. 

The monitor program makes possible emulation commands which 
access target system resources. (The only way to access target system 
resource is through the emulation processor.) For example, when you 
enter a command to modify target system memory, it is the execution 
of monitor program instructions that cause the new values to be written 
to target system memory. 
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The Background Monitor 



Register Display and 
Modification 



Single-Step 



Breakpoints 



Real Time Operation 



On emulator power-up, or after initialization, the emulator uses the 
background monitor program. The background monitor does not 
occupy processor address space. 

The Foreground Monitor 

You can configure the emulator to use a foreground monitor program. 
When a foreground monitor is selected it executes in the foreground 
emulator mode. The foreground monitor occupies processor memory 
space and executes as if it were part of your program. 

You can display or modify the 7700 Series internal register contents. 
This includes the ability to modify the program counter (PC) and the 
program bank register (PG) values so you can control where the 
emulator starts a program run. 

When you are using the background monitor, you can direct the 
emulation processor to execute a single instruction or a specified 
number of instructions. 



You can set the emulator/analyzer interaction so the emulator will 
break to the monitor program when the analyzer finds a specific state 
or states, allowing you to perform post-mortem analysis of the program 
execution. You can also set software breakpoints in your program. 
This feature is realized by inserting BRK instructions into user 
program. Refer to the "Using Software Breakpoints" section of 
"Getting Started" chapter for more information. 

Real-time signifies continuous execution of your program at full rated 
processor speed without interference from the emulator. (Such 
interference occurs when the emulator needs to break to the monitor to 
perform an action you requested, such as displaying target system 
memory.) Emulator features performed in real time include: running 
and analyzer tracing. Emulator features not performed in real time 
include: display or modify of target system memory; load/dump of 
target memory, display or modification of registers, and single step. 
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Coverage Coverage memory is provided for the processor' s external program 
Measurements memory space. This memory allows you to perform coverage 
measurements on programs in emulation memory. 

Reset Support The emulator can be reset from the emulation system under your 
control; or your target system can reset the emulation processor. 

Watch Dog Timer You can configure the emulator to disable the watch dog timer. 
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Limitations, 
Restrictions 



AcceSS tO Internal Modifying internal RAM or SFR suspends user program execution. 

RAM 



Trace Internal RAM Read data from the internal RAM or SFR is not traced correctly by the 

emulation analyzer. 



Note 
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Write data is also not traced correctly, when the following conditions 
are met: 

■ The emulator is used with the M37795 emulation pod. 

■ The processor is operating in the memory expansion or 
microprocessor mode with 8 bit external bus. 



DMA Support Direct memory access to emulation memory is not allowed. 



Watch Dog Timer in 
Background 



Watch dog timer suspends count down while the emulator is running in 
background monitor. 



Step Command with 
Foreground Monitor 



Step command is not available when the emulator is used with a 
foreground monitor. 



Step Command and 
Interrupts 



When an interrupt occurs while the emulator is running in monitor, the 
emulator fails to do the first step operation. The emulator will display 
the mnemonic of the instruction which should be stepped, but the 
instruction is not actually executed. The second step operation will 
step the first instruction of the interrupt routine. 
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When the 7700 microprocessor is in the stop or wait mode, emulation 
commands which access memory or registers will fail. You need to 
break the emulator into the monitor to use these commands. Once you 
break the emulator into the monitor, the stop or wait mode will be 
released. 

Stack Address in some versions of 7700 microprocessor, the stack can be located in 
Bank FF. However, the HP 64146A/B 7700 Series emulator doesn't 
support the feature. The stack must be located in Bank 0. 



Emulation 
Commands in 
Stop/Wait Mode 
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Getting Started 



Introduction This chapter will lead you through a basic, step by step tutorial 

designed to familiarize you with the use of the HP 64700 emulator for 
the 7700 Series microprocessor. When you have completed this 
chapter, you will be able to perform these tasks: 

■ Set up an emulation configuration for out of circuit emulation 
use 

■ Transfer a small program into emulation memory 

■ Use run/stop controls to control operation of your program 

■ Use memory manipulation features to alter the program' s 
operation 

■ Use analyzer commands to view the real time execution of 
your program 
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Before You Begin Before be ginning the tutorial presented in this chapter, you must have 

completed the following tasks: 

1. Completed Hardware installation 

Complete hardware installation of the HP 64700 emulator in 
configuration you intend to use for your work: 

- Standalone configuration 

- Transparent configuration 

- Remote configuration 

References: The HP 64700 Series Installation/Service manual 

2. Connected the emulation pod to the emulator 

Connect the emulation pod to the emulator as shown in Figure 
2-1. 




Figure 2-1. Connecting the Emulation Pod 



Caution 




Turn off power of the emulator before inserting the cable to the 
emulation pod to avoid circuit damage. 
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If you have properly completed steps above, you should be able to hit 
<RETURN> (or <ENTER> on some keyboards) and get a prompt on 
your terminal screen: 

If you do not see any prompt, retrace your steps through the hardware 
and software installation procedures outlined in the manuals above, 
verifying all connections and procedural steps. In any case, you must 
have a command prompt on your terminal screen before proceeding 
with the tutorial. 



A Look at the 
Sample Program 



The sample program "COMMAND_READER" used in this chapter is 
shown Figure 2-2. The program emulates a primitive command 
interpreter. 



Note 
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This sample program is written for Mitsubishi RASM77 Assembler. 



Data Declarations 

INPUT_POINTER and OUTPUT_POINTER define the address 
locations of an input area and an output area to be used by the program. 
MESSAGE_A, MESSAGE_B and INVALIDJNPUT are the 
messages used by the program to respond to various command inputs. 

Initialization 

First, the INIT routine set up the stack pointer. Next, locations of the 
input area is cleared by the CLEAR_INPUT routines. 



READINPUT 

This routine continuously reads the byte at location 100 hex until it is 
something other than a null character (00 hexadecimal); when this 
occurs, the CLEAR_OUTPUT routine clears the output area, and the 
PROCESS_COMM routine is executed. 
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. DP 


2 
3 










. DT 


4 










. SECTION 


5 










. ORG 


6 


(000100) 


1H BYTE 




INPUT_POINTER : 


. BLKB 


7 










. ORG 


8 


/ r\ r\ r\ -"i r\ r\ \ 

( 000200 ) 


1H BYTE 




OUTPUT_POINTER : 


. BLKB 


9 
10 










. SECTION 


1 1 










. ORG 


12 


00D000 


544849532049 




MESSAGE_A : 


. BYTE 




00D006 


53204D455353 










OODOOC 


4147452041 








13 


00D011 


544849532049 




MESSAGE_B : 


. BYTE 




00D017 


53204D455353 










00D01D 


4147452042 








14 


00D022 


494E56414C49 




INVALID_INPUT : 


. BYTE 




00D028 


4420434F4D4D 










00D02E 


414E44 








15 












1 6 










. SECTION 


17 










. DATA 


18 










. INDEX 


1 9 










. ORG 


20 


oocooo 


A27F02 




INIT : 


LDX 


21 


00C003 


9A 






TXS 


22 


00C004 


F8 






SEM 


23 


00C005 


42A900 




CLEAR_INPUT : 


LDA 


24 


00C008 


428D0001 


L 




STA 


25 


OOCOOC 


AD 0001 


L 


READ_INPUT : 


LDA 


26 


OOCOOF 


C900 






CMP 


27 


00C011 


F0F9 


L 




BEQ 


28 
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. INDEX 


30 


00C013 


E210 






SEP 


31 


00C015 


A200 




CLEAR_OUTPUT : 


LDX 


32 


00C017 


A020 






LDY 


33 


00C019 


429D0002 


L 


CLEAR_LOOP : 


STA 


34 


00C01D 


E8 






INX 


35 


00C01E 


88 






DEY 


36 


00C01F 


D0F8 


L 




BNE 


37 












38 










. INDEX 


39 


00C021 


C210 






CLP 


40 


00C023 


C941 




PROCESS_COMM: 


CMP 


41 


00C025 


F006 


L 




BEQ 


42 


00C027 


C942 






CMP 


43 


00C029 


F009 


L 




BEQ 


44 


00C02B 


800E 


L 




BRA 


45 


00C02D 


A911 




COMMAND_A : 


LDA 


46 


00C02F 


A200D0 


L 




LDX 


47 


00C032 


800C 


L 




BRA 


48 


00C034 


A911 




COMMAND_B : 


LDA 


49 


00C036 


A211D0 


L 




LDX 


50 


00C039 


8005 


L 




BRA 



0 
0 

BUFFER 
100H 

1 

200H 

1 

TABLE 
0D000H 

'THIS IS MESSAGE A' 



'THIS IS MESSAGE B' 



' INVALID COMMAND' 



SAMPPROG 
8 

16 

0C000H 
#27FH 



B, #00H 

B, DT : INPUT_POINTER 
A, DT : INPUT_POINTER 
A, #00H 
READ_INPUT 



X 

#00H 
#20H 

B, DT : OUTPUT_POINTER, 



CLEAR_LOOP 

16 
X 

A, #41H 

COMMAND_A 

A, #42H 

COMMAND_B 

UNRECOGNIZED 

A, #11H 

#MESSAGE_A 

OUTPUT 

A, #11H 

#MESSAGE_B 

OUTPUT 



Figure 2-2. Sample Program Listing 
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00C03D A222D0 

00C040 A00002 

00C043 540000 

00C046 80BD 



00C03B A90F 



L 
L 



L 



UNRECOGNIZED : 



OUTPUT : 



LDA 
LDX 
LDY 
MVN 
BRA 



A, #0FH 

#INVALID_INPUT 

#OUTPUT_POINTER 

0,0 

CLEAR_INPUT 



.END 



Figure 2-2. Sample Program Listing (Cont'd) 



PROCESS_COMM 

Compares the input byte (now something other than a null) to the 
possible command bytes of "A" (ASCII 41 hex) and "B" (ASCII 42 
hex), then jumps to the appropriate set up routine for the command 
message. If the input byte does not match either of these values, a 
branch to a set up routine for an error message is executed. 

COMMAND A, COMMAND B, UNRECOGNIZED 

These routines set up the proper parameters for writing the output 
message: the number of bytes in the message is moved to accumulator 
A and the base address of the message in the data area is moved to 
index register X. 

OUTPUT 

First, the base address of the output area is moved to index 
register Y. Finally, the proper message is written to the output area by 
the MVN instruction. When done, OUTPUT jumps back to 
CLEAR_INPUT and the command monitoring process begins again. 

Using the various features of the emulator, we will show you how to 
load this program into emulation memory, execute it, monitor the 
program's operation with the analyzer, and simulate entry of different 
commands utilizing the memory access commands provided by the HP 
64700 command set. 
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Using the Help 
Facility 



If you need a quick reference to the Terminal Interface syntax, you can 
use the built-in help facilities. For example, to display the top level 
help menu, type: 



R> help 



help - display help information 

help <group> - print help for desired group 

help -s <group> - print short help for desired group 

help <command> - print help for desired command 

help - print this help screen 

VALID group NAMES 

gram - system grammar 

proc - processor specific grammar 

sys - system commands 

emul - emulation commands 

trc - analyzer trace commands 

* - all command groups 



You can type the ? symbol instead of typing help. For example, if you 
want a list of commands in the emul command group, type: 

R> ? emul 



emul - emulation commands 



b 


. .break to monitor 


dump . 


.dump memory 




. . run user code 


be 


. .break condition 


es . . . 


.emulation status 


reg . . 


. . registers 


bp. . . 


. . breakpoints 


io . . . 


. input / output 


rst . . 


. .reset 


cf 


. . configuration 


load . 


. load memory 




. . run at CMB execute 


cim. . 


..copy target image 


m. . . . 


. memory 


s . . . . 


. . step 


cmb . . 


..CMB interaction 


map . . 


.memory mapper 


ser . . 


..search memory 


cov . . 


. . coverage 


mo . . . 


. modes 






cp. . . 


. . copy memory 


mx . . . 


. mx 







To display help information for any command, just type help (or ?) and 
the command name. For example: 

R> help load 
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load - download absolute file into processor memory space 



load 


-i 


- download intel hex format 


load 


-m 


- download motorola S-record format 


load 


-t 


- download extended tek hex format 


load 


-S 


- download symbol file 


load 


-h 


- download hp format (requires transfer protocol) 


load 


-a 


- reserved for internal hp use 


load 


-e 


- write only to emulation memory 


load 


-u 


- write only to target memory 


load 


-o 


- data received from the non-command source port 


load 


-s 


- send a character string out the other port 


load 


-b 


- data sent in binary (valid with -h option) 


load 


-x 


- data sent in hex ascii (valid with -h option) 


load 


-q 


- quiet mode 


load 


-p 


- record ACK/NAK protocol (valid with -imt options) 


load 


-c <file> 


- data is received from the 64000. file name format 



<f ilename> : <userid> : absolute 



Initialize the To initialize the emulator to a known state for this tutorial: 

Emulator to a 
Known State 



Note Msl 11 is especially important that you perform the following step if the 

emulator is being operated in a standalone mode controlled by only a 
data terminal. The only program entry available in this mode is 
through memory modification; consequently, if the emulator is 
reinitialized, emulation memory will be cleared and a great deal of 
tedious work could be lost. 



1. Verify that no one else is using the emulator or will have need 
of configuration items programmed into the emulator. 

2. Initialize the emulator by typing the command: 
R> init -p 
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Set Up the Proper 

Emulation 

Configuration 

Set Up Emulation To set the emulator's configuration values to the proper state for this 
Conditions tutorial, do this: 

1. Type: 
R> cf 

You should see the following configuration items displayed: 

cf chip=7702M2 

cf isfr=0 . . 07f 

cf iram=080 . .21 t 

cf irom=0c000 . . Of f f f 

cf ipmr=05e 

cf mode=single 

cf mon=bg 

cf clk=int 

cf int=en 

cf rdy=dis 

cf rush=dis 

cf wdog=dis 

cf rsp=27f 

cf rrt=dis 

cf dmdt=dis 

cf tdma=dis 

cf trfsh=dis 

cf thold=dis 



Note 4p The individual configuration items won't be explained in this example 

refer to Chapter 4 of this manual and the User's Reference manual for 
details. 



2. You need to select chip you emulate. You can select chip 
with the following command: 

R> cf chip=<chip_name> 

You must enter appropriate <chip_name> to your processor. 
Valid <chip_name> are listed in Table 2- 1 . The default 
<chip_name> 7702M2 is applied to M37702M2 and 
M37703M2 processors. 



2-8 Getting Started 



<chip_name> 


Processor 


<chip_name> 




Processor 


7700M2 


M37700M2-xxxFP | 
I M2AxxxFP | 
M37701M2-xxxSP 

M2AxxxSP I 


7704M2 


1 
1 

— +- 


M37704M2-xxxFP 
M2AxxxFP 

M37705M2-xxxSP 
M2AxxxSP 


7700M4 


— + | 

M37700M4-xxxFP | 

I M4AxxxFP | 
M37701M4-xxxSP 

I M4AxxxSP I 


7704M3 


1 

— + - 


M3 7 7 0 4M3BxxxFP 




7704M4 


1 

— +- 


M37704M4BxxxFP 




7704S1 




M37704S1FP 
SIAFP 

M37705S1SP 
SIASP 


7700S 


— + | 

M37700SFP 
I SAFP 
M37701SSP 
SASP 


1 
1 

— + - 




7710M4 




M37710M4BxxxFP 


7700S4 


— + | 

M37700S4FP 
I S4AFP 
M37701S4SP 
S4ASP 


1 

— +- 


7710S4 


1 

— +- 


M37710S4BFP 




7720S1 


1 


M37720S1FP 
SIAFP 


7702M2 


— + | 

M37702M2-xxxFP | 
I M2AxxxFP | 
I M2BxxxFP | 

M37703M2-xxxSP 
I M2AxxxSP I 
I M2BxxxSP I 




1 

— +- 


7730S2 


1 
1 
1 
1 

— + - 


M37730S2FP 
S2AFP 
S2SP 
S2ASP 




7732S4 




M37732S4FP 
S4AFP 


7702M4 


— + | 

M37702M4-xxxFP | 
I M4AxxxFP | 
I M4BxxxFP | 

M37703M4-xxxSP 
I M4AxxxSP I 
I M4BxxxSP I 


1 
1 

— + - 




7780S 


1 
1 

— + - 


M37780STJ 
STFP 




7781M4 


1 


M37781M4TxxxJ 
M4TxxxFP 


7702M6 


— + | 

M37702M6BxxxFP 

M6LxxxFP | 




1 

— + - 


7781E4 


1 


M37781E4TxxxJ 
E4TxxxFP 


7702S1 


— + | 

M37702S1FP 
I SIAFP 
I SIBFP 

M37703S1SP 
1 SIASP 
I SIBSP 




1 

— + - 


7795S 


1 

— + - 


M37795SJ 
STJ 




7796E4 


1 


M37796E4-xxxJ 
E4TxxxJ 
E4TxxxFP 


7702S4 


— + | 

M37702S4FP 
I S4AFP 
I S4BFP 

M37703S4SP 
1 S4ASP 
S4BSP 




1 




— + - 







Table 2-1 . <chip_name> for cf chip Command 
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3. Now, set up reset value for the stack pointer. 
R> cf rsp=27f 



Note 




Without a stack pointer, the emulator is unable to make the transition to 
the run state, step, or perform many other emulation functions. 



be -d bp tdisable 
be -d rom #disable 
be -d bnct #disable 
be -d cmbt #disable 
be -d trigl #disable 
be -d trig2 tdisable 



be -d bp tdisable 
be -e rom #enable 
be -d bnct tdisable 
be -d cmbt tdisable 
be -e trigl #enable 
be -e trig2 #enable 



4. Let's go ahead and set up the proper break conditions. 
Type: 

R> be 

You will see: 



For each break condition that does not match the one listed, 
use one of the following commands: 

To enable break conditions that are currently disabled, type: 
R> be -e <breakpoint type> 

To disable break conditions that are currently enabled, type: 
R> be -d <breakpoint type> 

For example, if typing be gives the following list of break 

conditions: 



(items in bold indicate improper values for this example) 
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Type the following commands to set the break conditions 
correctly for this example: 

R> be -d rom 

(this enables the write to ROM break) 
R> be -d trigl trig2 

(this disables break on triggers from the analyzer) 

5. To avoid problems later while modifying and displaying 
memory locations, type: 

R> mo -ab -db 

This sets the access and display mode for memory operation 
byte. 



Map Memory The emulation memory can be configured as you desire. You can 

define emulation memory as emulation RAM, emulation ROM, target 
RAM, target ROM or guarded memory. 

We will use the default mapping for this sample program. To see the 
default mapping, type: 

R> map 

You will see similar display to the following: 

# remaining number of terms : 15 

# remaining emulation memory : lb800h bytes 
map OOOcOOO . . OOOf f f f erom # term 1 
map other tram 



4 



Note I You don't have to map the internal RAM area, since the emulator uses 

the internal RAM of emulation processor to perform emulation. If your 
processor has no internal RAM, map address 100 hex through 2ff hex 
with the following command for this tutorial. 

R> map 100 ..2ff eram 
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Transfer Code 
into Emulation 
Memory 



To transfer code into emulation memory from a data terminal running 
in standalone mode, you must use the modify memory commands. 
This is necessary because you have no host computer transfer facilities 
to automatically download the code for you (as if you would if you 
were using the transparent configuration or the remote configuration.) 
To minimize the effects of typing errors, you will modify only one row 
of memory at a time in this example. Do the following: 

Enter the data information for the program by typing the following 
commands: 

R> m OdOOO . . 0d00f=54, 4 8, 4 9, 53, 20, 49, 53, 20, 4 d, 45,53,53,41,47,45,20 
R> m OdOlO . . OdO If = 41, 54, 4 8, 4 9, 53, 20, 49, 53, 20, 4 d, 45,53,53,41,47,45 
R> m 0d020 . . 0d02f =20 , 42 , 4 9, 4e, 56, 41, 4c, 49, 44, 20, 43, 4f, 4 d, 4d, 41, 4 e 

R> m 0d030=44 

You could also type the following line instead: 

R> m 0d000="THIS IS MESSAGE ATHIS IS MESSAGE BINVALID COMMAND" 



From a Terminal in 
Standalone 
Configuration 



You should now verify that the data area of the program is correct by 
typing: 

R> m OdOOO . . 0d030 

You should see: 

000d000 . . OOOdOOf 54 48 49 53 20 49 53 20 4d 45 53 53 41 47 45 20 

OOOdOlO . . OOOdOlf 41 54 48 49 53 20 49 53 20 4d 45 53 53 41 47 45 

000d020 . . 000d02f 20 42 49 4e 56 41 4c 49 44 20 43 4f 4d 4d 41 4e 

000d030 . . 000d030 44 

If this is not correct, you can correct the errors by re-entering only the 
modify memory commands for the particular rows of memory that are 
wrong. 

For example,if row dOOCdOOf shows these values: 

OOOdOOO .. OOOdOOf 54 48 49 53 20 20 49 53 20 4d 45 53 53 41 47 45 

you can correct this row of memory by typing: 

R> m OdOOO. .0d00f=54,48,49,53,20,49,53,20,4d,45,53,53,41,47,45,20 
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Or, you might need to modify only one location, as in the instance 
where address dOOf equals 22 hex rather than 20 hex. Type: 

R> m 0d00f=20 



Enter the program information by typing the following commands: 



R> m OcOOO. . 0c00f=0a2, 7f , 02, 9a, Of 8, 42, 0a9, 00, 42, 8d, 00, 01, Oad, 00, 01, 0c9 
R> m OcOlO. . 0c01f=00, OfO, Of 9, 0e2 , 10 , 0a2 , 00 , OaO , 20 , 42 , 09d, 00 , 02 , 0e8 , 88 , OdO 
R> m 0c020. . 0c02f=0f8, 0c2, 10, 0c9, 41, OfO, 06, 0c9, 42, OfO, 09, 80, Oe, 0a9, 11, 0a2 
R> m 0c030 . . 0c03f=00, OdO, 80, Oc, 0a9, 11, 0a2, 11, OdO, 80, 05, 0a9, Of, 0a2, 22, OdO 
R> m 0c040 . . 0c047=0a0, 00, 02, 54, 00, 00, 80, Obd 

(note the hex letters must be preceded by a digit) 



You should now verify that the program area is correct by typing: 
R> m OcOOO . . 0c047 



You should see: 

OOOcOOO .. OOOcOOf a2 If 02 9a f8 42 a9 00 42 8d 00 01 ad 00 01 c9 

OOOcOlO. .OOOcOlf 00 fO f9 e2 10 a2 00 aO 20 42 9d 00 02 e8 88 dO 

000c020 . . 000c02f f8 c2 10 c9 41 fO 06 c9 42 fO 09 80 Oe a9 11 a2 

000c030 . . 000c03f 00 dO 80 Oc a9 11 a2 11 dO 80 05 a9 Of a2 22 dO 
000c040 . . 000c047 aO 00 02 54 00 00 80 bd 



If this is not correct, you can correct the errors by re-entering only the 
modify memory commands for the particular rows of memory that are 
wrong. 



login : 
login : 
login : 



Transparent 
Configuration 



If your emulator is connected between a terminal and a host computer, 
you can down load programs into memory using the load command 
with the -o (from other port) option. 

First, you must establish communications with your host computer 
through the transparent mode link provided in the HP 64700. Type: 

R> xp -e 

If you then press <RETURN> a few times, you should see: 
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This is the login prompt for an HP-UX host system. (Your prompt may 
differ depending on how your system manager has configured your 
system.) Log in to your host system. 

Disable the transparent mode so that your terminal will talk directly to 
the emulator. Type: 

$ <ESC>g xp -d 

The "<ESC>g" sequence temporarily toggles the transparent mode so 
that the emulator will accept commands; "xp -d" then fully disables the 
transparent mode. 

The succeeding procedure is different depending on the format you are 
going to download. 

HP Absolute 

If you have a Softkey Interface, a file format converter is provided with 
it. The converter can convert MELPS 7700 Hex format files into HP 
Absolute files. (Refer to Softkey Interface User's Guide for more 
details.) Downloading the HP Absolute requires the transfer protocol. 
The example below assumes that the transfer utility has been installed 
on the HP 9000/300 host computer. 

R> load -hbo <RETURN> 
transfer -rtb cmd_rds.X <ESC>g 
########## 
R> 



Intel Hex format 



The example which follow shows how to download the Intel 
hexadecimal files. 

R> load -io <RETURN> 
cat cmd_rds . hex<ESC>g 
########### 

Data records received = 00009 
R> 



N Ote ^ The emulator can load the MELPS 7700 Hex format files with 

load -i command when the program is located address fffff hex or less. 
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At this point you should examine a portion of memory to verify that 
your code was loaded correctly. 



Type: 

R> m OcOOO . . 0c047 

You should see: 



OOOcOOO . 


. OOOcOOf 


a2 


7f 


02 


9a 


f 8 


42 


a9 


00 


42 


8d 


00 


01 


ad 


00 


01 


c9 


OOOcOlO . 


. OOOcOlf 


00 


f 0 


f 9 


e2 


10 


a2 


00 


aO 


20 


42 


9d 


00 


02 


e8 


88 


dO 


000c020 . 


. 000c02f 


f8 


c2 


10 


c9 


41 


f 0 


06 


c9 


42 


fO 


06 


80 


Oe 


a9 


11 


a2 


000c030 . 


. 000c03f 


00 


dO 


80 


0c 


a9 


11 


a2 


11 


dO 


80 


05 


a9 


Of 


a2 


22 


dO 


000c040 . 


. 000c047 


aO 


00 


02 


54 


00 


00 


80 


bd 



















Looking at Your 
Code 



Now that you have loaded your code into emulation memory, you can 
display it in mnemonic format. Before displaying memory in 
mnemonic format, you need to tell the emulator what value of M flag 
and X flag should be used to disassemble the memory contents. This is 
needed because the length of operand is variable according to M flag 
and X flag. Type: 

R> mx -mO -xO 

To display memory in mnemonic format, type: 



R> m -dm 
You will see: 



OcOOO. .0c047 



000c000 




LDX 


#027fH 


000c003 




TXS 




000c004 




SEM 




000c005 




LDA 


B, #00H 


000c008 




STA 


B, DT : 0100H 


OOOcOOc 




LDA 


A, DT : 0100H 


OOOcOOf 




CMP 


A, #00H 


OOOcOll 




BEQ 


OOcOOcH 


000c013 




SEP 


#10H 


000c015 




LDX 


#00H 


000c017 




LDY 


#20H 


000c019 




STA 


B, DT : 0200H, X 


OOOcOld 




INX 




OOOcOle 




DEY 




OOOcOlf 




BNE 


00c019H 


000c021 




CLP 


#10H 


000c023 




CMP 


A, #41H 


000c025 




BEQ 


00c02dH 


000c027 




CMP 


A, #42H 


000c029 




BEQ 


00c034H 


000c02b 




BRA 


00c03bH 


000c02d 




LDA 


A, #11H 


000c02f 




LDX 


#d000H 
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000c032 - 

000c034 - 

000c036 - 

000c039 - 

000c03b - 

000c03d - 

000c040 - 

000c043 - 

000c046 - 



BRA 00c040H 
LDA A, #11H 
LDX #d011H 
BRA 00c040H 
LDA A, #0f H 
LDX #d022H 
LDY #0200H 
MVN OOH,OOH 
BRA 00c005H 



When the inverse assembler encounters the following instruction, the 
mx command is set up automatically. 

■ SEM 

■ CLM 

■ SEP X 

■ CLP X 

■ SEP M 

■ CLP M 

In the above example, the mx command is set up as following: 

■ SEM (0c004) mx-ml-xO 

■ SEPX(0c013) mx-ml-xl 

■ CLPX(0c021) mx-ml-xO 



When you display memory in mnemonic format without specifying the 
mx command, the last setting is used to disassemble the memory 
contents. Type: 

R> m 0c015 . . 0c02f 



000c015 - 

000c018 - 

OOOcOlb - 

OOOcOld - 

OOOcOle - 

OOOcOlf - 

000c021 - 

000c023 - 

000c025 - 

000c027 - 

000c029 - 

000c02b - 

000c02d - 

000c02f - 



LDX #a000H 

JSR PG: 9d42H 

BRK 

INX 

DEY 

BNE 00c019H 
CLP #10H 
CMP A, #41H 
BEQ 00c02dH 
CMP A, #42H 
BEQ 00c034H 
BRA 00c03bH 
LDA A, #11H 
LDX #d000H 
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As you can see, the memory contents is not disassembled correctly. To 
see the correct mnemonic, set up the mx command: 

R> mx -xl 

R> m 0c015 . . 0c02f 



000c015 - 

000c017 - 

000c019 - 

OOOcOld - 

OOOcOle - 

OOOcOlf - 

000c021 - 

000c023 - 

000c025 - 

000c027 - 

000c029 - 

000c02b - 

000c02d - 

000c02f - 



LDX #00H 
LDY #20H 

STA B,DT:0200H,X 

INX 

DEY 

BNE OOcOlM 
CLP #10H 
CMP A, #41H 
BEQ 00c02dH 
CMP A, #42H 
BEQ 00c034H 
BRA 00c03bH 
LDA A, #11H 
LDX #d000H 



Familiarize 
Yourself with the 
System Prompts 



The following steps are not intended to be complete explanations of 
each command; the information is only provided to give you some idea 
of the meanings of the various command prompts you may see and 
reasons why the prompt changes as you execute various commands. 




You should gain some familiarity with the HP 64700 emulator 
command prompts by doing the following: 

Ignore the current command prompt. Type: 

*> rst 
You will see: 

R> 
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The rst command resets the emulation processor and holds it in the 
reset state. The "R>" prompt indicates that the processor is reset. 

Type: 

R> r OcOOO 
You will see: 

U> 

The r command runs the processor from address 2000 hex. 

Type: 

U> b 
You will see: 

M> 

The b command causes the emulation processor to "break" execution 
of whatever it was doing and begin executing within the emulation 
monitor. The "M>" prompt indicates that the emulator is running in 
the monitor. 



Running the Type: 
Sample Program 

M> r OcOOO 

The emulator changes state from background to foreground and begins 
running the sample program from location OcOOO hex. 



Note ||gl The default number base for address and data values within HP 64700 

is hexadecimal. Other number bases may be specified. Refer to the 
HP 64700 User's Reference manual for further details. 



Let's look at the registers to verify that the stack pointer was properly 
initialized. Type: 

U> reg 
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reg pg=00 pc=cOOc ps=0023 



You will see: 

dt=00 sp=027f a=ff00 b=0000 x=027f y=0017 dpr=0000 



Notice that sp contains 27f hex. 

Verify that the input area command byte was cleared during 
initialization. 

Type: 

U> m -db 100 

You will see: 

0000100. .0000100 00 

The input byte location was successfully cleared. 

Now we will use the emulator features to make the program work. 
Remember that the program writes specific messages to the output area 
depending on what the input byte location contains. Type: 

U> m 100=41 

This modifies the input byte location to the hex value for an ASCII 
"A". Now let's check the output area for a message. 

U> m 200. .21f 
You will see: 

0000200 .. 000020f 54 48 49 53 20 49 53 20 4d 45 53 53 41 47 45 20 
0000210 .. 000021f 41 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 

These are the ASCII values for MESSAGE_A. 

Repeat the last two commands twice. The first time, use 42 instead of 
41 at location 100 and note that MESSAGE_B overwrites 
MESSAGE_A. Then try these again, using any number except 00, 41, 
or 42 and note that the INVALIDJNPUT message is written to this 
area. 



Note Wm When you modify/display internal RAM or SFR, the emulator breaks 

into the monitor, and the monitor program reads the contents of 
memory. This is because the emulator uses internal RAM and SFR of 
emulation processor to perform emulation. Note that user program 
execution is suspended to modify/diplay internal RAM or SFR. 
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Note 




You can configure the emulator so that data write cycles are performed 



to both internal RAM (or SFR) and emulation memory. In this case, 
you can display the data written to emulation memory without 
suspending user program execution. Refer to chapter 4 of this manual 
for more details. 



Stepping Through You can also direct the emulator processor to execute one instruction 
the Program or number of instructions. Type: 

M> s 1 0c000;reg 

This command steps 1 instruction from address OcOOO hex, and 
displays registers. You will see: 

OOOcOOO - LDX #027fH 

PC = 000c003 

reg pg=00 pc=c003 ps=0021 dt=00 sp=027f a=ff00 b=0000 x=027f y=0021 dpr=0000 



To step one instruction from present PC, you only need to type s at 
prompt. Type: 

M> s ; reg 
You will see: 

000c003 - TXS 
PC = 000c004 

reg pg=00 pc=c004 ps=0021 dt=00 sp=027f a=ff00 b=0000 x=027f y=0021 dpr=0000 



Note Ha When the you use the s command, the disassembled mnemonic 

™ displayed may not be accurate. You need to set up mx command 
before using the s command to see the correct mnemonic. 
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Note When the emulator performs single step execution with s command, all 

memory access is performed by byte access. 



Easy Command 
Entry 



Using Macros Suppose you want to continue stepping through the program, 

displaying registers after each step. You could continue entering "s" 
commands followed by "reg" commands, but you may find this 
tiresome. It is easier to use a macro to perform a sequence of 
commands which will be entered again and again. 

Macros allow you to combine and store commands. For example, to 
define a macro which will display registers after every step, enter the 
following command. 

M> mac st={s;reg} 

Once the "st" macro has been defined, you can use it as you would any 
other command. 

M> st 

000c004 - SEM 
PC = 000c005 

reg pg=00 pc=c005 ps=0021 dt=00 sp=027f a=ff00 b=0000 x=027f y=0021 dpr=0000 



Command Recall The command recall feature is yet another , easier way to enter 

commands again and again. You can press <CTRL>-r to recall the 
commands which have just been entered. If you go past the command 
of interest, you can press <CTRL>-b to move forward through the list 
of saved commands. To continue stepping through the sample 
program, you could repeatedly press <CTRL>-r to recall and 
<RETURN> to execute the "st" macro. 
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Tracing Program 
Execution 



Note Ha F° r this example, you will be using the analyzer in the easy 

™ configuration, which simplifies the process of analyzer measurement 
setup. The complex configuration allows more powerful 
measurements, but requires more interaction from you to set up those 
measurements. For more information on easy and complex analyzer 
configurations and the analyzer, refer to the HP 64700 Analyzer User's 
Guide and the User's Reference. 



Now let's use the emulation analyzer to trace execution of the program. 
Suppose that you would like to start the trace when the analyzer begins 
writing data to the message output area. You can do this by specifying 
analyzer trigger upon encountering write status to address 200 hex. 
Furthermore, you might want to store only the data written to the 
output area. This can be accomplished by modifying what is known as 
the "analyzer storage specification". 

Now let's set the trigger specification. Type: 

M> tg addr=200 and stat=write 

To store only the accesses to the address range 200 hex through 21f 
hex, type: 

M> tsto addr=200 . .21f 

Let's change the data format of the trace display so that you will see 
the output message writes displayed in ASCII format: 

M> tf addr,h data, a nine count, r seq 

Start the trace by typing: 

M> t 
You will see: 

Emulation trace started 

To start the emulation run, type: 
M> r OcOOO 
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Now, you need to have a "command" input to the program so that the 
program will jump to the output routines (otherwise the trigger will not 
be found, since the program will never access address 200 hex). Type: 

U> m 100=41 

To display the trace list, type: 

U> tl 0. .10 
You will see: 



Line 



addr,H data, A M7700 Mnemonic, H 



count, R seq 



0 


000200 


xxOOH 


data 


write 


mx 








1 


000201 .. 


OOxxH 


data 


write 


mx 


56 


00 


uS 


2 


000202 . . 


xxOOH 


data 


write 


mx 


56 


00 


uS 


3 


000203 . . 


OOxxH 


data 


write 


mx 


56 


00 


uS 


4 


000204 . . 


xxOOH 


data 


write 


mx 


56 


00 


uS 


5 


000205 . . 


OOxxH 


data 


write 


mx 


56 


00 


uS 


6 


000206 .. 


xxOOH 


data 


write 


mx 


56 


00 


uS 


7 


000207 . . 


OOxxH 


data 


write 


mx 


56 


00 


uS 


8 


000208 . . 


xxOOH 


data 


write 


mx 


56 


00 


uS 


9 


000209 .. 


OOxxH 


data 


write 


mx 


56 


00 


uS 


10 


00020a . . 


xxOOH 


data 


write 


mx 


56 


00 


uS 



The above list shows the execution of the CLEAR_OUTPUT routine 
which cleared the output area. To see the states that the program wrote 
the message to the output area, type: 

U> tl 30. .40 



Line 


addr, H 


data, A 


M7700 Mnemonic, H 






count, R 


30 


00021e 




xxOOH 


data 


write 


mx 


56. 


00 uS 


31 


00021f 




OOxxH 


data 


write 


mx 


56. 


00 uS 


32 


000200 


HT 


4854H 


data 


write 


mx 


134 


.0 uS 


33 


000202 


SI 


5349H 


data 


write 


mx 


18. 


00 uS 


34 


000204 


I . 


4920H 


data 


write 


mx 


18. 


00 uS 


35 


000206 


. S 


2053H 


data 


write 


mx 


18. 


00 uS 


36 


000208 


EM 


454dH 


data 


write 


mx 


18. 


00 uS 


37 


00020a 


SS 


5353H 


data 


write 


mx 


18. 


00 uS 


38 


00020c 


GA 


4741H 


data 


write 


mx 


18. 


00 uS 


39 


00020e 


. E 


2045H 


data 


write 


mx 


18. 


00 uS 


40 



















seq 



If you look at the last lines of the trace listing, you will notice that the 
analyzer seems to have stored only part of the output message, even 
though you specified more than the full range needed to store all of the 
message. The reason for this is that the analyzer has a storage pipeline, 
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Emulation trace halted 



which holds states that have been acquired but not yet written to trace 
memory. To see all of the states, halt the analyzer by typing: 

U> th 
You will see: 



Now display the trace list: 

U> tl 30. .40 

You will see: 



Line 


addr, H 


data, A 


M7700 Mnemonic, H 






count , R 


30 


00021e 




xxOOH 


data 


write 


mx 


56. 


00 uS 


31 


00021f 




OOxxH 


data 


write 


mx 


56. 


00 uS 


32 


000200 


HT 


4854H 


data 


write 


mx 


134 


.0 uS 


33 


000202 


SI 


5349H 


data 


write 


mx 


18. 


00 uS 


34 


000204 


I . 


4920H 


data 


write 


mx 


18. 


00 uS 


35 


000206 


. S 


2053H 


data 


write 


mx 


18. 


00 uS 


36 


000208 


EM 


4 54dH 


data 


write 


mx 


18. 


00 uS 


37 


00020a 


SS 


5353H 


data 


write 


mx 


18. 


00 uS 


38 


00020c 


GA 


4741H 


data 


write 


mx 


18. 


00 uS 


39 


00020e 


.E 


2045H 


data 


write 


mx 


18. 


00 uS 


40 


000210 


TA 


xx41H 


data 


write 


mx 


16. 


00 uS 



seq 



As you can see, all of the requested states have been captured by the 
analyzer. 

Predefined Status Equates 

Common values for the status trace signals have been predefined. One 
of these equates "write" was used in the above example. You can see 
these equates with the following command. 

U> equ 

### Equates ### 
equ bg=0xlxxxxxxy 
equ byte=0xxlxlxlxy 
equ cpu=0xxllxxxxy 
equ data=0xxlxl0xxy 
equ dma=0xxl0xxxxy 
equ exec=0xxll01xxy 
equ f etch-Oxxl 1 1 lxly 
equ f g=0x0xxxxxxy 
equ hold=0xx01xxxxy 
equ mx=lxxxxxxxy 
equ read=0xxlxlxxly 
equ ref=0xx00xxxxy 
equ word=0xxlxlx0xy 
equ write=0xxlxlxx0y 
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Using Software 
Breakpoints 



You can stop program execution at specific address by using bp 
(software breakpoint) command. When you define a software 
breakpoint to a certain address, the emulator will replace the opcode 
with BRK instruction as software breakpoint instruction. When the 
emulator detects the BRK instruction, user program breaks to the 
monitor, and the original opcode will be placed at the breakpoint 
address. A subsequent run or step command will execute from this 
address. 

If the BRK instruction was not inserted as the result of bp command 
(in other words, it is part of the user program), the "Undefined software 
breakpoint" message is displayed. 



Note 



4 



You can set software breakpoints only at memory locations which 
contain instruction opcodes (not operands or data). If a software 
breakpoint is set at a memory location which is not an instruction 
opcode, the software breakpoint instruction will never be executed and 
the break will never occur. 



Note B£j Because software breakpoints are implemented by replacing opcodes 

with the software breakpoint instruction, you cannot define software 
breakpoints in target ROM. You can, however, copy target ROM into 
emulation memory by cim command when you are using the 
background monitor. (Refer to HP 64700 Terminal Interface User's 
Reference manual.) 



Before you can define software breakpoints, you must enable software 
breakpoints with the be (break conditions) command. To view the 
default break conditions and change the software breakpoint condition, 
enter the following commands. 

M> be 

be -d bp Idisable 
be -d rom #disable 
be -d bnct #disable 



Displaying and 
Modifying the Break 
Conditions 
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be -d cmbt #disable 
be -d trigl tdisable 
be -d trig2 tdisable 

M> be -e bp 



Defining a Software 
Breakpoint 



Now that the software breakpoint is enabled, you can define software 
breakpoints. Enter the following command to break on the address of 
the OUTPUT label. 



M> bp 0c040 



Run the program and verify that execution broke at the appropriate 
address. 



M> r OcOOO 
U> m 100=41 

!ASYNC_STAT 615! Software break point: 000c040 



M> reg 

reg pg=00 pc=c040 ps=00al dt=00 sp=027f a=0011 b=0000 x=d000 y=0000 dpr=0000 

Notice that PC contains c040. 

When a breakpoint is hit, it becomes disabled. You can use the -e 
option to the bp command to reenable the software breakpoint. 

M> bp 

###BREAKPOINT FEATURE IS ENABLED### 
bp 000c040 #disabled 

M> bp -e 0c040 

M> bp 

###BREAKPOINT FEATURE IS ENABLED### 
bp 000c040 #enabled 

M> r OcOOO 
U> m 100=41 

!ASYNC_STAT 615! Software breakpoint: 000c040 

M> bp 

###BREAKPOINT FEATURE IS ENABLED### 
bp 000c040 #disabled 
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Searching 
Memory for 
Strings or 
Numeric 
Expressions 



The HP 64700 Emulator provides you with tools that allow you to 
search memory for data strings or numeric expressions. For example, 
you might want to know exactly where a string is loaded. To locate the 
position of the string "THIS IS MESSAGE A" in the sample program. 
Type: 



pattern match at address: 



M> ser OcOOO. 

OOOdOOO 



. Odfff="THIS IS MESSAGE A" 



You can also find numeric expressions. For example, you might want 
to find all of the BEQ instructions in the sample program. Since a BEQ 
instruction begins with fO hex, you can search for that value by typing: 

M> ser -db OcOOO .. 0c047=0f0 



pattern match at address: OOOcOll 
pattern match at address: 000c025 
pattern match at address: 000c029 



Making Program 

Coverage 

Measurements 



In testing your program, you will often want to verify that all possible 
code segments are executed. With the sample program, we might want 
to verify that all of the code is executed if a command "A", command 
"B", and an unrecognized command are input to the program. 



To make this measurement, we must first reset the coverage status. 
M> cov -r 
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Note 




You should always reset the coverage status before making a coverage 
measurement. Any emulator system command which accesses 
emulation memory will affect the coverage status bit, resulting in 
measurement errors if the coverage status is not reset. 




Now, run the program and input the following commands: 

M> r OcOOO 

U> cov OcOOO.. 0c047 

percentage of memory accessed: % 30.5 

U> m 100=41 

U> cov OcOOO.. 0c047 

percentage of memory accessed: % 81.9 



U> m 100=42 
U> m 100=43 
U> cov OcOOO.. 0c047 



percentage of memory accessed 



% 100.0 
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Trace Analysis 
Considerations 



Restriction Of the There is a restriction on the function of the emulation analyzer. It 

Analyzer cannot trace the data which is read from internal RAM or SFR area. 

Such data always appears ff hex in the trace listing. This is because the 
emulator uses the internal RAM and SFR of emulation processor to 
perform emulation. Data read from internal RAM or SFR doesn't 
appear on the analyzer data bus. 

As an example, trace the accesses to the INPUT_POINTER. 

To initialize the analyzer, type: 
U> tinit 

Set up the trigger condition and perform the trace: 

U> tg addr=0c00c and stat=exec 

u> t 

U> tl 0. .20 



Line 


addr, H 


M7700 Mnemonic, H 




count, R 


0 


OOcOOc 


LDA 


A, DT : 0100H 




2 


000 


uS 


1 


OOcOOe 




c901H opcode fetch 


mx 


6 


000 


uS 


2 


000100 




xxffH data read 


mx 


4 


000 


uS 


3 


OOcOOf 


CMP 


A, #00H 




2 


000 


uS 


4 


OOcOlO 




fOOOH opcode fetch 


mx 


6 


000 


uS 


5 


OOcOll 


BEQ 


OOcOOcH 




2 


000 


uS 


6 


00c012 




e2f9H opcode fetch 




6 


000 


uS 


7 


00c014 




a210H opcode fetch 




8 


000 


uS 


8 


OOcOOc 




OOadH opcode fetch 




8 


000 


uS 


9 


OOcOOc 


LDA 


A, DT : 0100H 




2 


000 


uS 


10 


OOcOOe 




c901H opcode fetch 


mx 


6 


000 


uS 


11 


000100 




xxffH data read 


mx 


4 


000 


uS 


12 


OOcOOf 


CMP 


A, #00H 




2 


000 


uS 


13 


OOcOlO 




fOOOH opcode fetch 


mx 


6 


000 


uS 


14 


OOcOll 


BEQ 


OOcOOcH 




2 


000 


uS 


15 


00c012 




e2f9H opcode fetch 




6 


000 


uS 


16 


00c014 




a210H opcode fetch 




8 


000 


uS 


17 


OOcOOc 




OOadH opcode fetch 




8 


000 


uS 


18 


OOcOOc 


LDA 


A, DT : 0100H 




2 


000 


uS 


19 


OOcOOe 




c901H opcode fetch 


mx 


6 


000 


uS 


20 


000100 




xxffH data read 


mx 


4 


000 


uS 



seq 



As you can see in line 2 of the listing above, data read from internal 
RAM (which should be 00 hex) appears ff hex. 
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Notes 



2-30 Getting Started 



3 



Using the 7700 Series Emulator In-Circuit 



When you are ready to use the HP 64146A/B 7700 Series Emulator in 
conjunction with actual target system hardware, there are some special 
considerations you should keep in mind. 

■ installing the emulator probe 

■ properly configure the emulator 

We will cover the first topic in this chapter. For complete details on 
in-circuit emulation configuration, refer to Chapter 4. 
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Installing the 
Target System 
Probe 



Caution H The following precautions should be taken while using the HP 

64146A/B 7700 Series Emulator. Damage to the emulator circuitry 
may result if these precautions are not observed. 

Power Down Target System. Turn off power to the user target system 
and to the HP 64146A/B 7700 Series Emulator before inserting the 
user plug to avoid circuit damage resulting from voltage transients or 
mis-insertion of the user plug. 

Verify User Plug Orientation. Make certain that Pin 1 of the target 
system microprocessor socket and Pin 1 of the user plug are properly 
aligned before inserting the user plug in the socket. Failure to do so 
may result in damage to the emulator circuitry. 

Protect Against Static Discharge. The HP 64146A/B 7700 Series 
Emulator contains devices which are susceptible to damage by static 
discharge. Therefore, operators should take precautionary measures 
before handling the user plug to avoid emulator damage. 



Caution H You target system must have a clock generation circuit. The 

emulation pod cannot generate clock signal using a ceramic (or quartz 
crystal) resonator. 
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Installing the Target 

System Probe 1. Set up the switches inside the emulation pod. When you are 

using the HP 64146-61001 or 64146-61002 emulation pod, 
refer to 7700 Series Emulation Pod User's Guide. When you 
are using an other emulation pod, refer to the manual provided 
with your emulation pod. 

2. Remove the 7700 Series microprocessor from the target 

system socket. Note the location of pin 1 on the processor and 
on the target system socket. 



3. Store the microprocessor in a protected environment (such as 
antistatic foam). 



4. Install the target system probe into the target system 
microprocessor socket. (See figure 3-1 .) 

5. Turn on power of your target system, and then, turn on the 
emulator. 
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When your target system uses 64 pin shrink DIP socket, use the adapter 
as shown in figure 3-2. 




Figure 3-2. Installing the Probe to SDIP64 Socket 
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Configuring the 7700 Series Emulator 



In this chapter, we will discuss: 

■ how to configure the HP 64700 emulator for 7700 Series 
microprocessor to fit your particular measurement needs. 

■ some restrictions of HP 64700 emulator for 7700 Series 
microprocessor. 



Types of Emulator 
Configuration 



The HP 64700 Emulator is different from other HP emulators (such as 
those in the HP 64000-UX system) in that there are several different 
classes of configuration commands. 



Emulation Processor 
to Emulator/Target 
System 



These are the commands which are generally thought of as 
"configuration" items in the context of other HP 64000 emulator 
systems. The commands in this group set up the relationships between 
the emulation processor and the target system, such as determining 
how the emulator responds to requests for the processor bus. Also, 
these commands determine how the emulation processor interacts with 
the emulator itself; memory mapping and the emulator's response to 
certain processor actions are some of the items which can be 
configured. 

These commands are the ones which are covered in this chapter. 



Commands Which 
Perform an Action or 
Measurement 



Several of the emulator commands do not configure the emulator; they 
simply start an emulator program run or other measurement, begin or 
halt an analyzer measurement, or allow you to display the results of 
such measurements. 
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These commands are covered in the examples presented in earlier 
manual chapters; they are also covered in the HP 64700 Terminal 
Interface: User's Reference manual. 



Coord i nated These commands determine how the emulator interacts with other 
Measurements measurement instruments, such as external analyzers, or other HP 

64700 emulators connected via the CMB (Coordinated Measurement 
Bus). 

These commands are covered in the HP 64700 CMB User's Guide and 
in the HP 64700 Terminal Interface: User's Reference Manual. 



Analyzer The analyzer configuration commands are those commands which 
actually specify what type of measurement the analyzer is to make. 

Some of the analyzer commands are covered earlier in this manual. 
You can also refer to the HP 64700 Terminal Interface: Analyzer 
User's Guide and the HP 64700 Terminal Interface: User's Reference 
manual. 

System This last group of commands is used by you to set the emulator's data 
communications protocol, load or dump contents of emulation 
memory, set up command macros, and so on. 

These commands are covered earlier in this manual and in the manual 
titled HP 64700 Terminal Interface: User's Reference. 
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Emulation As noted before, these commands determine how the emulation 

PrOCGSSOT tO processor will interact with the emulator's memory and the target 

S y Stem during an emulation measurement. 

Emulator/Target 
System 



Cf The cf command defines how the emulation processor will respond to 
certain target system signals. It also defines the type of emulation 
monitor to be used and optionally defines the location of that monitor 
in emulation memory. 

To see the default configuration settings defined by the cf command, 
type: 

M> cf 
You will see: 

cf chip=7702M2 

cf isf r=0 . . 07f 

cf iram=080 . . 27f 

cf irom=0c000 . . Of f f f 

cf ipmr=05e 

cf mode=single 

cf mon=bg 

cf clk=int 

cf int=en 

cf rdy=dis 

cf rush=dis 

cf wdog=dis 

cf rsp=27f 

cf rrt=dis 

cf dmdt=dis 

cf tdma=dis 

cf trfsh=dis 

cf thold=dis 

Let's examine each of these emulator configuration options, with a 
view towards how they affect the processor's interaction with the 
emulator. 
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cf chip 



The chip configuration item defines the chip you emulate. This 
command looks a prepared table, and set up the isfr, iram, irom and 
rsp configuration items. The rsp configuration item is set to the end of 
internal RAM area. 

M> cf chip=<chip_name> 

Processors supported by this command and their <chip_name> are 
listed in table 4-1. 

M> cf chip=other 

If your processor is not listed in table 4-1, you need to select "others" 
for this item. In this case, you should set up proper value for cf isfr, cf 
iram, cf irom, cf ipmr, and cf rsp by yourself. 



Note 




Executing this command will drive the emulator into the reset state. 



cf isfr 

The isfr (internal Special Function Register: SFR) configuration item 
defines the location of SFR area. 



Note Ma This item is automatically set up by cf chip command. Therefore, you 

don't have to set up this item when your processor can be specified by 
cf chip command. If your processor is not supported by cf chip 
command (when you select "other" for the configuration item), you 
need to set up proper value for cf isfr command. Refer to cf chip 
section to determine if your processor is supported by cf chip 
command or not. 



M> cf isf r=<address> . . <address> 
[ , <address> . . <address>] 

You can specify the start address and end address of SFR area by 
above command. The start address and end address of this area can be 
defined on 16 byte boundaries. 

M> cf isfr=none 
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<chip_name> 


Processor 


<chip_name> 




Processor 


7 7 D (1M9 


l v lo / /UU11Z — XXXr r 

I M2AxxxFP | 
M37701M2-xxxSP 

M2AxxxSP I 


7704M2 


1 
1 
1 
1 

1 

1 
1 


M37704M2-xxxFP 

M9&YYYRP 

M37705M2-xxxSP 

MZAXXXo ir 


1 7 0 flMd 


— + | 

M4AxxxFP | 
M37701M4-xxxSP 

M4AxxxSP I 


7 7 0 4M^ 


-- + - 

1 
1 


M3 7 7 0 4M3BxxxFP 




7704M4 


— +- 


M37704M4BxxxFP 




7704S1 




M37704S1FP 
SIAFP 

l v i J / / U u O ± O r 

SIASP 


7700S 


— + | 

M37700SFP 
I SAFP 

no / / ui j jr 

SASP 


1 
1 

1 
1 

1 
1 

+ - 




7 7 1 OMd 


1 


LlJj 1 1 1 VJ114DAAAI XT 


7700S4 


— + 1 

M37700S4FP 
I S4AFP 
M37701S4SP 
S4ASP 

-4- 1 


1 

— + - 


7710S4 


1 


M37710S4BFP 




7720S1 


1 

1 


M37720S1FP 
SIAFP 


7702M2 


| M37702M2-xxxFP | 
| M2AxxxFP | 

1 M9RvvvFP 1 

M37703M2-xxxSP I 
I M2AxxxSP I 
I M2BxxxSP I 




1 


7730S2 


-(_. 

1 

1 
1 
1 

1 

— + - 


M37730S2FP 
S2AFP 

oZ oir 

S2ASP 




7 7 3 2 S 4 


1 


M'577'59 Q Zl TP 

S4AFP 


7702M4 


— + | 

M37702M4-xxxFP | 
M4AxxxFP | 

! rTjliXXXr ir ; 

M37703M4-xxxSP 
I M4AxxxSP I 
I M4BxxxSP I 


1 

1 

— + - 




7 7 p n c 


i 
1 

— + - 


M37780STJ 
STFP 




7781M4 


1 


M37781M4TxxxJ 
M4TxxxFP 


7702M6 


— + | 

M37702M6BxxxFP | 
M6LxxxFP | 




1 

— +- 


7781E4 


1 
i 


M37781E4TxxxJ 

TP A TvvvPD 
III H 1 XXXr ir 


7702S1 


M37702S1FP 
SIAFP 
SIBFP 

M37703S1SP 
SIASP 
SIBSP 




1 

— + - 


7795S 


1 
1 

— + - 


M37795SJ 
STJ 




7796E4 


1 


M37796E4-xxxJ 
E4TxxxJ 
E4TxxxFP 


7702S4 


— + | 

M37702S4FP 
S4AFP 
S4BFP 
M37703S4SP 
1 S4ASP 
S4BSP 




1 

— + - 











Table 4-1. Supported Chip by cf chip Command 
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ere is no SFR in your processor, you should select "none" to this 
configuration item. 



Note 




Executing this command will drive the emulator into the reset state. 



cf iram 

The iram (internal RAM) configuration item defines the location of 
internal RAM area. 



Note Ma This item is automatically set up by cf chip command. Therefore, you 

■T don't have to set up this item when your processor can be specified by 
cf chip command. If your processor is not supported by cf chip 
command (when you select "other" for the configuration item), you 
need to set up proper value for cf iram command. Refer to cf chip 
section to determine if your processor is supported by cf chip 
command or not. 



M> cf iram=<address> . . <address> 
[ , <address> . . <address>] 

You can specify the start address and end address of internal RAM area 
by above command. The start address and end address can be defined 
on 16 byte boundaries. 

M> cf iram=none 

When there is no internal RAM in your processor, you should select 
"none" to this configuration item. 



Note 




Executing this command will drive the emulator into the reset state. 
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cf irom 



The irom (internal ROM) configuration item defines the location of 
internal ROM area. 



This item is automatically set up by cf chip command. Therefore, you 
don't have to set up this item when your processor can be specified by 
cf chip command. If your processor is not supported by cf chip 
command (when you select "other" for the configuration item), you 
need to set up proper value for cf irom command. Refer to cf chip 
section to determine if your processor is supported by cf chip 
command or not. 



M> cf irom=<address> . . <address> 

You can specify the start address and end address of internal ROM area 
by above command. The start address and end address can be defined 
on 16 byte boundaries. 

M> cf irom=none 

When there is no internal ROM in your processor, you should select 
"none" to this configuration item. 



Executing this command will drive the emulator into the reset state. 
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cf ipmr 



The ipmr (processor mode register) configuration item defines the 
location of the processor mode register. 



Note 89 This item is automatically set up by cf chip command. Therefore, you 

don't have to set up this item when your processor can be specified by 
cf chip command. If your processor is not supported by cf chip 
command (when you select "other" for the configuration item), you 
need to set up proper value for cf ipmr command. Refer to cf chip 
section to determine if your processor is supported by cf chip 
command or not. 



M> cf ipmr=<address> 

You can specify the address of processor mode register by above 
command. 



Note Ma This configuration item is needed to manage the processor mode. Note 

that the address is correctly specified, when you set up this 
configuration item by yourself. 



Note 




Executing this command will drive the emulator into the reset state. 
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cf mode 

The mode (cpu operation mode) configuration item defines operation 
mode of the processor and data bus width. 

M> cf mode=<mode> 

Valid <mode> are following: 

<mode> Description 

single The emulator will operate in single chip mode. 

ext8 The emulator will operate in memory expansion 

mode with 8 bits external data bus width. 



extl6 The emulator will operate in memory expansion 

mode with 16 bits external data bus width. 

proc8 The emulator will operate in microprocessor mode 

with 8 bits external data bus width. 

procl6 The emulator will operate in microprocessor mode 

with 16 bits external data bus width. 



You may need to set up a switch inside the emualtion pod in addition 
to this configuration. Refer to the manual provided with your 
emulation pod. 



Executing this command will drive the emulator into the reset state. 
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cf mon 



The mon (monitor) configuration item allows you to choose between a 
foreground monitor supplied by you or the background monitor 
supplied with the emulator. 

The emulation monitor is the program that handles communication 
between the emulation controller and the emulation processor. For 
example, when you ask for a register display, the processor is broken to 
the monitor, executes some code to store its register contents in an 
array of memory locations, then returns to executing your program. 

The background monitor provided with the emulator offers the greatest 
degree of transparency to your target system (that is, your target system 
should generally be unaffected by monitor execution). However, in 
some cases you may require an emulation monitor tailored to the 
requirements of your system. In this case, you will need to use a 
foreground monitor linked into your program modules. See Appendix 
A of this manual for more information on foreground monitors. 

M> cf mon=bg 

You select the use of the built-in background monitor through the 
above command. A memory overlay is created and the background 
monitor is loaded into that area. 

M> cf mon=fg. .XXXX 

You select the use of your foreground monitor using this command. 

XXXX defines an 16 bits hex address where the monitor will be 
located. (Note: this will not load the monitor, it only specifies its 
location). You can define the location on a 2 kbyte boundary (address 
ending in 000 hex or 800 hex). You can not locate the monitor at 
internal RAM area or Special Function Register area. 

Remember that you must assemble and link your foreground monitor 
starting at the 2 kbyte boundary specified in the command above. You 
must also load the monitor into emulation memory. 
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If you intend to use a foreground monitor, the monitor must be loaded 
before attempting to load any information into target system memory. 



A memory mapper term is automatically created when you execute the 
cf mon=fg command to reserve 2 kilobytes of memory space for the 
monitor. 

The memory map is reset any time cf mon=fg is entered. It is only 
reset when cf mon=bg if the emulator is not already configured to use 
the background monitor. 



Executing this command will drive the emulator into the reset state. 



cf elk 

The elk (clock) option allows you to select whether the emulation 
processor's clock will be sourced by your target system or by the 
emulation pod. 

M> cf clk=int 

You can select the emulator's internal clock using the above command. 
The clock is provided from the circuit in the emulation pod. In the case 
of HP 64146-61001 or HP 64146-61002 emulation pod, the internal 
clock speed is 1 MHz. When you use an emulation pod with clock 
faster than 16 MHz, you need to enable the cf rush configuration or 
insert one wait state. 

M> cf clk=ext 

You can specify that the emulator should use the clock input to the 
emulator probe from the target system as the system clock. You must 
use a clock input conforming to the specifications for the 7700 Series 
microprocessor. When clock is faster than 16 MHz, you need to enable 
the cf rush configuration or insert one wait state. 
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Note You can insert a wait state with one of the following methods. 

■ Providing the /RDY from the target system. 

■ Configuring the emulator to generate the /RDY signal. Refer 
to the section describing the cf rdy command. 



Note When the external clock is selected, your target system must have a 

™ clock generation circuit. The HP 64146-61001 and 64146-61002 

emulation pods cannot generate clock signal using a ceramic (or quartz 
crystal) resonator. 



4 



Note MA Executing this command will drive the emulator into the reset state. 



cf int 

The int configuration item determines whether or not the emulator 
responds to interrupt signals from the target system during foreground 
operation. 

M> cf int=en 

Using the above command, you can specify that the emulator will 
respond to interrupts from the target system. 

M> cf int=dis 

The emulator won't respond to interrupts from the target system. 

If you are using the background monitor, the emulator does not accept 
any interrupt during background execution. Edge sensed interrupts 
occurred during in background is latched only the last one, and this 
interrupt will occur when context is changed to foreground. Level 
sensed interrupts are ignored during in background operation. 
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You may need to set up switches inside the pod to accept interrupts 
from the target system. Refer to the manual provided with your 
emulation pod. 



Executing this command will drive the emulator into the reset state. 



cf rdy 

The rdy configuration item defines whether or not the emulator 
introduces /RDY input when it accesses any memory. This feature is 
used to run the emulator with clock faster than 16 MHz. 

M> cf rdy=dis 

You can disable the /RDY input by the emulator with above command. 
When clock is equal or slower than 16 MHz, always use the emulator 
with cf rdy=dis. 

M> cf rdy=en 

When enabled, the emulator activate /RDY input for one clock cycle, 
every time the emulator accesses memory. 



Executing this command will drive the emulator into the reset state. 



cf rush 

The rush configuration item enables/disables the high speed access 
mode of the emulator. 

M> cf rush=dis 

You can disable the high speed access mode with the above command. 
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When you disable the high speed access mode: 

■ You can define up to 16 different map terms which can be 
placed wherever you like. (Refer to the "Memory Mapping" 
section in this chapter.) 

■ The emulator can run with no wait state, up to 16 MHz. 

■ The emulator can run with one wait state, up to 25 MHz. 

M> cf rush=en 

You can enable the high speed access mode with the above command. 

When you enable the high speed access mode: 

■ The emulator can access emulation memory with no wait 
state, up to 25 MHz. 

■ You can map the emulation memory only to the following 
location. 



Memory 


Monitor 


Available location 


128K 


Background 


000000-01F7FF 


128K 


Foreground 


000000-01FFFF 


512K 


Background 


000000-07F7FF 


512K 


Foreground 


000000-07FFFF 


1M 


Background 


000000-0FF7FF 


1M 


Foreground 


000000-OFFFFF 


2M 


Background 


000000- 1FF7FF 


2M 


Foreground 


000000- 1FFFFF 



cf wdog 

The wdog (watch dog timer) configuration item defines whether the 
watch dog timer is enabled or not. 

M> cf wdog=dis 

You can disable the watch dog timer with above command. 

M> cf wdog=en 

You can enable the watch dog timer with above command. 

cf rsp 

The rsp (reset stack pointer) configuration item allows you to specify a 
value to which the stack pointer and stack page register will be set 
upon the transition from emulation reset into the emulation monitor. 
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This item is automatically set up by cf chip command. The cf chip 
command set up rsp to the end of internal RAM. When you select a 
processor which has no internal RAM, rsp is set to FFF hex. 



R> cf rsp=XXXX 

where XXXX is a 16 bits address, will set the stack pointer to that 
value upon entry to the emulation monitor after an emulation reset. 
When the emulator breaks to the background monitor, the monitor 
program needs 5 bytes of stack. 

For example, to set the stack pointer to 27f hex, type: 

R> cf rsp=27f 

Now, if you break the emulator to monitor using the b command, the 
stack pointer will be modified to the value 27f hex. 



Without a stack pointer, the emulator is unable to make the transition to 
the run state, step, or perform many other emulation functions. 



cf rrt 

The rrt (restrict to real time) option lets you configure the emulator so 
that commands which cause the emulator to break to monitor and 
return to the user program will be rejected by the emulator command 
interpreter. 

M> cf rrt=en 

You can restrict the emulator to accepting only commands which don't 
cause temporary breaks to the monitor by entering the above command. 
Only the following emulator run/stop commands will be accepted: 

rst (resets emulation processor) 

b (breaks processor to background monitor until you enter another 
command) 

r (runs the emulation processor from a given location) 
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s (steps the processor through a piece of code - returns to monitor after 
each step) 

Commands which cause the emulator to break to the monitor and 
return, such as reg, m (for target memory display), and others will be 
rejected by the emulator. 



Caution HI If y° ur target system circuitry is dependent on constant execution of 

program code, you should set this option to cf rrt=en. This will help 
insure that target system damage doesn't occur. However, remember 
that you can still execute the rst, b and s commands; you should use 
caution in executing these commands. 



M> cf rrt=dis 

When you use this command, all commands, regardless of whether or 
not they require a break to the emulation monitor, are accepted by the 
emulator. 



cf dmdt 

This configuration item is reserved for use by the Softkey/PC Interface. 
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cf tdma 



The tdma (trace DMA cycles) configuration item defines whether or 
not the emulator traces DMA cycles. 

M> cf tdma=en 

When you enable this item with the above command, each time DMA 
performed, one emulation analyzer state will be generated to recognize 
the DMA cycle. 

M> cf tdma=dis 

When disabled, no analyzer state will be generated at the occurrence of 
DMA. Therefore, any DMA cycle will be ignored by the analyzer. 



cf trfsh 

The trfsh (trace bus release cycles) configuration item defines whether 
or not the emulator traces refresh cycles. 

M> cf trfsh=en 

When you enable this item with the above command, refresh cycles are 
traced by the emulation analyzer. 

M> cf trfsh=dis 

When disabled, refresh cycles are not traced by the analyzer. 



cf thold 

The thold (trace hold cycles) configuration item defines whether or not 
the emulator traces hold cycles. 

M> cf thold=en 

When you enable this item with the above command, the emulation 
analyzer will trace hold cycles. 

M> cf thold=dis 

When disabled, hold cycles are not traced by the emulation analyzer. 
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Memory Mapping Before you begin an emulator session, you must specify the location 

and type of various memory regions used by your programs and your 
target system (whether or not it exists). You do this for several reasons: 

■ the emulator must know whether a given memory location 
resides in emulation memory or in target system memory. 
This allows the emulator to properly orient buffers for the 
given data transfer. 

■ the emulator needs to know the size of any emulation memory 
blocks so it can properly reserve emulation memory space for 
those blocks. 

■ the emulator must know if a given space is RAM (read/ write), 
ROM (read only), or doesn't exist. This allows the emulator to 
determine if certain actions taken by the emulation processor 
are proper for the memory type being accessed. For example, 
if the processor tries to write to a emulation memory location 
mapped as ROM, the emulator will not permit the write (even 
if the memory at the given location is actually RAM). (You 
can optionally configure the emulator to break to the monitor 
upon such occurrence with the be -e rom command.) Also, if 
the emulation processor attempts to access a non existent 
location (known as "guarded"), the emulator will break to the 
monitor. 

You use the map command to define memory ranges and types for the 
emulator. The HP 64146A/B 7700 Series emulator memory mapper 
allows you to define up to 16 different map terms; each map term has a 
minimum size of 256 bytes. If you specify a value less than 256 byte, 
the emulator will automatically allocate an entire block. You can 
specify one of five different memory types (erom, eram, trom, tram, 
grd). 



4-18 Configuring the Emulator 



For example, you might be developing a system with the following 
characteristics: 



■ input port at 500 hex 

■ output port at 580 hex 

■ program and data in external ROM from cOOO through 
dfffhex 

Suppose that the only thing that exists in your target system at this time 
are input and output ports and some control logic; no memory is 
available. You can reflect this by mapping the I/O ports to target 
system memory space and the rest of memory to emulation memory 
space. Type the following commands: 

R> map -d * 

R> map 500.. 580 tram 

R> map OcOOO . . Odfff erom 

R> map 



# remaining number of terms : 14 

# remaining emulation memory : 7df00h bytes 
map 0000500 .. 00005ff tram # term 1 
map 000C000 . . OOdf f f eram # term 2 
map other tram 



As you can see, the mapper rounded up the second term to 256 bytes 
block, since those are minimum size blocks supported by the HP 
64146A/B 7700 Series emulator. 



Note Mtl When you emulate the internal ROM area, you must map the address 

TP to emulation memory. 



Not© ^| You cannot map Internal RAM and SFR as guarded (grd). 
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Note 




You should map all memory ranges used by your programs before 



loading programs into memory. This helps safeguard against loads 
which accidentally overwrite earlier loads if you follow a map/load 
procedure for each memory range. 



Internal RAM and SFR 

The emulator uses internal RAM of emulation processor to emulate 
user program. When you direct the emulator to display the contents of 
internal RAM (or SFR) area, the emulator breaks to the monitor and 
the monitor program reads the contents of memory. Therefore, 
execution of user program is suspended to perform your direction. 
However, you can configure the emulator so that write cycles are 
performed to both internal RAM (or SFR) and emulation memory. In 
this case, you can see the data written to emulation memory without 
suspending program execution. 

To use this feature, you need to map these area to emulation RAM 
(eram). When you do this, you can display the contents of emulation 
memory with m command without suspending user program execution. 
You still can display the contents of internal RAM by appending " @i" 
to address specification in m command. 

For example, to see the content of address 100 hex in internal RAM, 
you can do both of the following: 

M> m 100 (This command accesses emulation 
memory) 

M> m 100@i (This command accesses internal 
RAM of emulation processor.) 
When you don't map the internal RAM and SFR area to emulation 
RAM, you can access the internal RAM and SFR without appending 
"@i". 
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Note 




The contents of emulation memory is updated only when user program 



writes data to internal RAM or SFR. Therefore, the contents of 
emulation memory may be different from the actual value of internal 
RAM or SFR. Especially, you should pay a close attention when 
seeing flags of SFR. 



Note When you modify memory, the emulator breaks to the monitor, and 

writes data to internal RAM or SFR. Therefore, user program is 
suspended when modifying internal RAM or SFR. 



For further information on mapping, refer to the examples in earlier 
chapters of this manual and to the HP 64700 Terminal Interface User's 
Reference manual. 

Break Conditions The be command lets you configure the emulator' s response to various 

emulation system and external events. 

Write to ROM 

If you want the emulator to break into the emulation monitor whenever 
the user program attempts to write to a memory region mapped as 
ROM, enter: 

M> be -e rom 

You can disable this function by entering: 

M> be -d rom 

When disabled, the emulator will not break to the monitor upon a write 
to ROM; however, it will not modify the memory location if the 
memory at that location is actually RAM. 
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Software Breakpoints 



The bp command allows you to insert software traps in your code 
which will cause a break to the emulation monitor when encountered 
during program execution. If you want to enable the insertion and use 
of software breakpoints by the bp command, enter: 

M> be -e bp 

To disable use of software breakpoints, type: 

M> be -d bp 

Any breakpoints which previously existed in memory are disabled, but 
are not removed from the breakpoint table. 

Trigger Signals 

The HP 64700 emulator provides four different trigger signals which 
allow you to selectively start or stop measurements depending on the 
signal state. These are the bnct (rear panel BNC input), cmbt (CMB 
trigger input), trigl and trig2 signals (provided by the analyzer). 

You can configure the emulator to break to the monitor upon receipt of 
any of these signals. Simply type: 

M> be -e <signal> 

For example, to have the emulator break to monitor upon receipt of the 
trigl signal from the analyzer, type: 

M> be -e trigl 

(Note: in this situation, you must also configure the analyzer to drive 
the trigl signal upon finding its trigger by entering tgout trigl). 
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Restrictions and 
Considerations 



Access to Internal 
RAM 



Modifying internal RAM or SFR suspends user program execution. 



Trace Internal RAM 



Read data from the internal RAM or SFR is not traced correctly by the 
emulation analyzer. 



Note 
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Write data is also not traced correctly, when the following conditions 
are met: 

■ The emulator is used with the M37795 emulation pod. 

■ The processor is operating in the memory expansion or 
microprocessor mode with 8 bit external bus. 



DMA Support Direct memory access to emulation memory is not allowed. 



Watch Dog Timer in 
Background 



Watch dog timer suspends count down while the emulator is running in 
background monitor. 



Step Command with 
Foreground Monitor 



Step command is not available when the emulator is used with 
foreground monitor. 



Step Command and 
Interrupts 



When an interrupt occurs while the emulator is ruuning in monitor, the 
emulator fails to do the first step operation. The emulator will display 
the mnemonic of the instruction which should be stepped, but the 
instruction is not actually executed. The second step operation will 
step the first instruction of the interrupt routine. 
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When the 7700 microprocessor is in the stop or wait mode, emulation 
commands which access memory or registers will fail. You need to 
break the emulator into the monitor to use these commands. Once you 
break the emulator into the monitor, the stop or wait mode will be 
released. 

Stack Address in some versions of 7700 microprocessor, the stack can be located in 
Bank FF. However, the HP 64146A/B 7700 Series emulator doesn't 
support the feature. The stack must be located in Bank 0. 



Emulation 
Commands in 
Stop/Wait Mode 
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A 



Using the Optional Foreground Monitor 



By using and modifying the optional Foreground Monitor, you can 
provide an emulation environment which is customized to the needs of 
a particular target system. 



Comparison of An emulation monitor is required to service certain requests for 

POrgOrOUn d and information about the target system and the emulation processor. For 

** example, when you request a register display, the emulation processor 

Background is forced into the monitor. The monitor code has the processor dump 

Monitors ' tS re S' sters * nto cer t am emulation memory locations, which can then 

be read by the emulator system controller without further interference. 



Background Monitors A background monitor is an emulation monitor which overlays the 

processor' s memory space with a separate memory region. Entry into 
the monitor is normally accomplished by jamming the monitor 
addresses onto the processor's address bus. 

Usually, a background monitor will be easier to work with in starting a 
new design. The monitor is immediately available upon powerup, and 
you don't have to worry about linking in the monitor code or allocating 
space for the monitor to use the emulator. No assumptions are made 
about the target system environment; therefore, you can test and debug 
hardware before any target system code has been written. All of the 
processor' s address space is available for target system use, since the 
monitor memory is overlaid on processor memory, rather than 
subtracted from processor memory. Processor resources such as 
interrupts are not taken by the background monitor. 
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However, all background monitors sacrifice some level of support for 
the target system. For example, when the emulation processor enters 
the monitor code to display registers, it will not respond to target 
system interrupt requests. This may pose serious problems for 
complex applications that rely on the microprocessor for real-time, 
non-intrusive support. Also, the background monitor code resides in 
emulator firmware and can't be modified to handle special conditions. 

Foreground Monitors ^foreground monitor may be required for more complex debugging 

and integration applications. A foreground monitor is a block of code 
that runs in the same memory space as your program. You link this 
monitor with your code so that when control is passed to your program, 
the emulator can still service real-time events, such as interrupts or 
watchdog timers. For most multitasking, interrupt intensive 
applications, you will need to use a foreground monitor. 

You can tailor the foreground monitor to meet your needs, such as 
servicing target system interrupts. However, the foreground monitor 
does use part of the processor's address space, which may cause 
problems in some target systems. You must also properly configure 
the emulator to use a foreground monitor (see Chapter 4 and the 
examples in this appendix); and, you must link the monitor with your 
other program code. 
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In the following example, we will illustrate how to link a foreground 
monitor with the sample program from Chapter 2. By using the 
emulation analyzer, we will also show how the emulator switches from 
state to state using a foreground monitor. 



The foreground monitor program provided with HP 64146A/B 
emulator is written for Mitsubishi RASM77 Assembler. 



Monitor Address 

To use the monitor, you may need to modify the .EQU statement just 
after the first comment section of the monitor program listing. You 
should see the line below: 

LOCATE_ADRS . EQU 0B800H ; start monitor on 2k boundary in bank 0 

; rather than sf r/iram area 
PROCMODEREG . EQU 0005EH ;processor mode register's address 

You can specify the monitor location by modifying this label 
LOCATE_ADRS. For example, if you want locate the monitor 
program at aOOO hex, make above line to as below: 

LOCATE_ADRS .EQU 0A000H ; start monitor on 2k boundary in bank 0 

; rather than sf r/iram area 
PROCMODEREG .EQU 0005EH processor mode register's address 

You can load the fm7700b.a77 monitor on a 2k byte boundary of bank 
0 (except internal RAM area and SFR area). In this example, we will 
locate the monitor at b800 hex. Therefore, you don't have to modify 
the LOCATE_ADRS label. 
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An Example Using 
the Foreground 
Monitor 



Note 
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Modify Location 
Declaration Statement 



Processor Mode Register Address 

You may need to modify the .EQU statement at the PROCMODEREG 
label. This value defines the location of processor mode register. If 
your processor has processor mode register at address other than 5e 
hex, modify this value to appropriate value. The following list shows 
the address of processor mode register. 



Processor 


Processor Mode 
Register Address 


Processor 


Processor Mode 
Register Address 


7700M2 


1 5e | 


7704M2 


1 5e 


7700S 


1 5e | 


7704S1 


5e 


7700M4 


1 5e | 


7720S1 


I 5e 


7700S4 


1 5e | 


7730S2 


5e 


7702M2 


1 5e | 


7732S4 


1 d8 


7702S 


1 5e | 


7795S 


I d8 


7702M4 


1 5e | 


7796E4 


I d8 


7702S4 


1 5e | 







Configure the Before configuring the emulator, you should initialize the emulator to a 
Emulator known state. Type: 



R> init -p 

Select processor you are going to emulate. Type: 

R> cf chip=<chip_name> 

You need to tell the emulator that you will be using a foreground 
monitor and allocate the memory space for the monitor. This is all 
done with one configuration command. To locate the monitor on a 2k 
boundary starting at b800 hex, type: 

R> cf mon=fg. . 0b800 

To see the new memory mapper term allocated for the foreground 
monitor, type: 



# remaining number of terms : 

# remaining emulation memory : 
map 000b800 . . OOObf f f eram 
map other tram 



R> map 

15 

7f800h bytes 
# term 1 



Notice that a 2k byte block from b800 through bfff hex was mapped. 
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Now, you need to map memory space for the sample program. Type: 

R> map 0c000..0dfff erom 

If you are going to emulate a processor which has no internal RAM, 
map 100 hex through 2ff hex as emulation RAM. 

Set 3 Stack Pointer You need to set up the stack pointer for use by the foreground monitor. 

The foreground monitor use the stack when transit from foreground 
monitor to user program. You can use the cf rsp command to define 
the stack pointer location; the stack pointer will be initialized on each 
transition from emulation reset to the monitor. Type: 

R> cf rsp=27f 

Load the Program Now it's time to load the sample program and monitor. Assemble and 
Code link the monitor program. 

In the example shown, we're loading the program from a host with the 
emulator in Transparent Configuration. If you're using the standalone 
configuration with a data terminal, you will need to enter the data using 
the m command. (You can get the data from your assembly listings.) 
See Chapter 2 for information. 

Load the sample program by typing: 

R> load -ios "cat cmd_rds .hex" 

Load the monitor program by typing: 

R> load -ios "cat fm7700b.hex" 

Before we forget, let's initialize the stack pointer by breaking the 
emulator out of reset: 

R> b 

Now you can run the sample program. 
M> r OcOOOO 
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Limitations of 

Foreground 

Monitors 

Step Command Step command (s command) is not available when you are using the 
foreground monitor. 

cim Command cim command is not available when you are using the foreground 
monitor. 

Synchronized You cannot perform synchronized measurements over the CMB when 
measurements using a foreground monitor. If you need to make such measurements, 
set the foreground/background configuration option to cf mon=bg. 
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7700 Series Emulator Specific Command Syntax 



The following pages contain descriptions of command syntax specific 
to the 64146A/B 7700 Series emulator. The following syntax items are 
included (several items are part of other command syntax): 

■ <CONFIG_ITEMS>. May be specified in the cf (emulator 
configuration) and help cf commands. 

■ <DISPLAY_MODE>. May be specified in the mo (display 
and access mode), m (memory), and ser (search memory for 
data) commands. The display mode is used when memory 
locations are displayed or modified. 

■ <ADDRESS>. May be specified in emulation commands 
which allow addresses to be entered. 

■ <REG_NAME>. May be specified in the reg (register) 
command. 
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CONFIG ITEMS 



Summary 7700 Series emulator configuration items. 

Syntax 




< mode > 



1 pmr 



DeSCri ptiOll The 64146A/B 7700 Series emulator has several dedicated 

configuration items which allow you to specify the emulator's 
interaction with the target system and the rest of the emulation system. 
These items are: 



chip Select chip to be emulated. 

isfr Define the location of Special Function Register. 

iram Define the location of internal RAM. 

irom Define the location of internal ROM. 

ipmr Define the address of processor mode register 

mode Select operation mode of the processor. 

rush Enable/disable high speed access mode. 

mon Select background or foreground monitor. 

elk Select internal/external clock source. 

int Enable/disable interrupts from target system. 

rdy Enable/disable /RDY input by the emulator. 

wdog Enable/disable the Watch Dog Timer. 

rsp Specify reset value of the stack pointer. 

rrt Restrict emulator to real time runs 

tdma Enable/disable tracing DMA cycles. 

trfsh Enable/disable tracing refresh cycles. 

thold Enable/disable tracing hold cycles. 



Complete explanations of all configuration items are given in chapter 4 
of this manual. 
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Examples 



To select an external clock, type: 



M> cf clk=ext 

You can obtain the status of configuration items by typing the item 
name without a value. You can also specify multiple configuration 
items on the same line. Type: 

M> cf mon=fg. . 08000 rrt=dis elk 

cf clk=int 

Here, we changed to a foreground monitor located at address 8000 hex, 
disabled the real-time runs restriction, and ask processor clock source. 
Notice that items which are changed do not have status printed; you 
could explicitly request the new status by repeating the configuration 
item on the command line after the change but without a value. For 
example: 

R> cf mon=fg. . 2000 mon 

cf mon=fg. .2000 

Related information Refer to the cf syntax pages in the User's Reference manual. Also, 

refer to chapter 4 of this manual for complete information about each 
configuration item. 
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DISPLAY MODE 



Summary Specify the memory display mode 



Syntax 



DeSCri ptiOll The <DISPLAY_MODE> specifies the format of the memory display 
or the size of the memory which gets changed when memory is 
modified. 

b Byte. Memory is displayed in a byte format, and 

when memory locations are modified, bytes are 
changed. 



w 



Word. Memory is displayed in a word format, and 
when memory locations are modified, words are 
changed. 



m 



Mnemonic. Memory is displayed in mnemonic 
format; that is, the contents of memory locations 
are inverse-assembled into mnemonics and 
operands. When memory locations are modified, 
the last non-mnemonic display mode specification 
is used. You cannot specify this display mode in 
the ser (search memory for data) command. 



Defaults The <DIPLAY_MODE> is b at power up initialization. Display 

mode specifications are saved; that is, when a command changes the 
display mode, the new display mode becomes the current default. 
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Related Information Refer to the mo syntax information in the Terminal Interface Reference 

manual for more details on mode command. 



ACCESS_MODE 

Summary Specify the memory access mode 



Syntax 



DeSCri ption Access mode defines how the emulator accesses target system 

memory. The 64146A/B 7700 Series emulator allows the following 
access modes: 

b - byte access mode 

w - word access mode 

The emulator monitor uses the access mode to determine whether to 
use byte or word instructions during target system memory accesses, 
such as memory modification or display, (note that it does not affect 
how that data is displayed on screen, which is controlled by the display 
mode.) 

Def au ItS The <ACCESS_MODE> is b at power up initialization. Display 
mode specification are saved; that is, when a command changes the 
access mode, the new access mode becomes the current default. 

Related Information Refer to the mo syntax information in the Terminal Interface Reference 

manual for more details on mode command. 
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ADDRESS 



Summary Address specification used in emulation commands. 



DeSCN ptiOII The <ADDRESS> parameter used in emulation commands is specified 
in 24 bits address information. 



The @i specification is needed to access internal RAM or SFR when 
you map these area to emulation RAM. When you map these area to 
emulation RAM, data write cycles are performed to both internal RAM 
(or SFR) and emulation memory. Therefore, you can display the data 
written to emulation memory without suspending user program 
execution. To display internal RAM or SFR, you need to specify @i 
after address expression. 

When you don't map internal RAM and SFR to emulation memory, 
you can access the actual RAM or SFR without specifying @i after 
address expression. 



Syntax 




Examples 



m 1000 

m 20000..200ff 
m 100=41 
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REGISTERS 

Summary 



7700 Series register designators. 



<REG NAME> 



Related Commands 



Following registers are available: 



pg 


Program Bank Register 


pc 


Program Counter 


ps 


Processor Status Register 


dt 


Data Bank Register 


sp 


Stack Pointer 


a 


Accumulator A 


b 


Accumulator B 


X 


Index Register X 


y 


Index Register Y 


dpr 


Direct Page Register 



reg (register display/modify) 
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mx Command 



Syntax 




< RETURN) 



Summary The 7700 Series microprocessors have M flag and X flag which 

determine data length and index register length. The inverse assembler 
of emulator needs to know the value of these flags to disassemble the 
memory contents. The mx command tells the emulator the value of M 
flag and/or X flag. 

The -c option can be specified to set the current value of M and X flag 
in processor status register. 
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Notes 
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Index 



A adaptor 3-4 

ADDRESS syntax B-7 
Analyzer 

configuration 2-22 

configuration commands 4-2 

halting 2-24 

pipeline 2-24 

predefined status equates 2-24 
restrictions 2-29 
storage specification 2-22 
trace 2-22 

trace list display 2-23 
trace list format 2-22 
triggering the 2-22 
Analyzer trace 
starting 2-22 

B b Command 2-18 

Background monitor A-l 
be Command 2-10, 2-25, 4-21 
Before using the emulator 2-2 
bp Command 2-25, 4-22 
Break 

write to ROM 4-21 
Break condition 2-25 
Breaks 4-21 

C cf chip Command 2-8, 4-4 
cf elk Command 4-11 
cf Command 2-8, 4-3 
cf dmdt Command 4-16 
cf int Command 4-12 
cf ipmr Command 4-8 
cf iram Command 4-6 
cf irom Command 4-7 
cf map Command 4-13 
cf mode Command 4-9 
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cf mon Command 4-10 
cf rdy Command 4-13 
cf rrt Command 4-15 
cf rsp Command 4-14 
cf sfr Command 4-4 
cf tdma Command 4-17 
cf thold Command 4-17 
cf trfsh Command 4-17 
cf wdog Command 4-14 
cim Command 2-25 
clock 

internal clock 4-11 
Clock selection for microprocessor 4-11 
Comfiguration 

enable/disable mapper 4-13 
Command help 2-6 
Command prompts 2-17 

Command syntax, specific to 7700 Series emulator B-l 
Commands 

analyzer configuration 4-2 

b 2-18 

be 2-10, 2-25, 4-21 
bp 2-25, 4-22 
cf2-8, 4-3 
cfchip 2-8, 4-4 
cf elk 4-11 
cfdmdt 4-16 
cfint 4-12 
cf ipmr 4-8 
cf iram 4-6 
cf irom 4-7 
cf map 4-13 
cf mode 4-9 
cf mon 4-10 
cf rdy 4-13 
cf rrt 4-15 
cf rsp 4-14 
cf sfr 4-4 
cf tdma 4-17 
cf thold 4-17 
cf trfsh 4-17 
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cf wdog 4-14 

cim 2-25 

configuration 4-1 

coordinated measurement 4-2 

cov 2-27 

equ 2-24 

help 2-6 

init 2-7 

m 2-12, 2-19 

mac 2-21 

map 2-11, 4-18 

measurement 4-1 

mx 2-15 

r2-18 

recalling 2-21 
reg 2-18 
rst 2-17 
s2-20 
ser2-27 
system 4-2 
t2-22 
tf2-22 
tg 2-22 
th 2-24 
tl 2-23 
tsto 2-22 
xp 2-13 

Comparison of foreground/background monitors A-l 

CONFIGJTEMS syntax B-2 

Configuration 

analyzer 4-2 

breaks 4-21 

clock selection 4-11 

displaying 4-3 

enable/disable target interrupts 4-12 
enable/disable to trace DMA cycles 4-17 
enable/disable to trace hold cycles 4-17 
enable/disable to trace refresh cycles 4-17 
for getting started 2-8 
foreground/background monitor 4-10 
introducing RDY input 4-13 
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measurement commands 4-1 

memory mapping 4-18 

microprocessor operation mode 4-9 

processor to emulator/target system 4-1, 4-3 

restrict to real-time runs 4-15 

selecting processor 4-4 

setting up the internal RAM area 4-6 

setting up the internal ROM area 4-7 

setting up the processor mode register 4-8 

setting up the SFR area 4-4 

stack pointer 4-14 

system 4-2 

types of 4-1 
Coordinated measurement commands 4-2 
cov Command 2-27 
Coverage measurement 2-27 

D Displaying 

configuration 4-3 

memory 2-19 

registers 2-18 

trace list 2-23 
DMA cycles 

enable/disable tracing DMA cycles 4-17 
DT register 4-16 

E emulation memory 

mapping internal RAM and SFR area 4-20 
Emulation pod 1-4 

ordering information 1-4 
Emulation processor 1-4 

ordering information 1-4 
Emulator 

configuration 2-8 

initialization 2-7 

purpose 1-1 
Emulator features 1-5 

analyzer 1-6 

breakpoints 1-7 

clock speed 1-5 

coverage measurements 1-8 

emulation memory 1-5 
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foreground and background monitor 1-6 
high speed access mode 1-5 
processor reset control 1-8 
register display/modify 1-7 
restrict to real-time runs 1-7 
single-step processor 1-7 
Emulator limitations 1-9 

Access to Internal RAM 1-9 
displaying memory 4-21 
DMA support 1-9 

emulation command fails in stop/wait mode 1-10, 4-24 

modify/display internal RAM 2-19 

stack must be in bank 0 1-10, 4-24 

step command with foreground monitor 1-9 

step fails when an interrupt exists 1-9, 4-23 

trace internal RAM 1-9 

watch dog timer 1-9 
Emulator specific command syntax B-l 
equ Command 2-24 

F Foreground monitor 

address requirements 4-10 

cim command is unavailable A-6 

defining monitor address A-3 

defining processor mode register address A-4 

limitations A-6 

s command is unavailable A-6 
Foreground monitors A-2 

example of using A-3 
Function codes 

memory mapping 4-18 

H Halting the analyzer 2-24 
Help 2-6 

help Command 2-6 

high speed access mode 1-5 

Hold cycles 

enable/disable tracing hold cycles 4-17 

I Information help 2-6 
init Command 2-7 
Initializing the Emulator 2-7 
Installing target system probe 
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target system probe 3-2 
internal RAM 4-20 

display without suspending user program 2-20 

modify/display 2-19 
Interrupts 

enable/disable from target system 4-12 

L Limitations 

access to internal RAM 4-23 
DMA support 4-23 

step command with foreground monitor 4-23 
trace accesses to internal RAM 4-23 
Watch dog timer in background 4-23 
Loading programs 2-12 

for Standalone Configuration 2-12 
for Transparent Configuration 2-13 
transfer utility 2-13 

M m Command 2-12, 2-19 

modify/display internal RAM 2-19 
mac Command 2-21 
Macro 2-21 

map Command 2-11, 4-18 
Measurement commands 4-1 
Memory Display 2-19 

mnemonic format 2-15 

setting up M flag and X flag 2-15 
Memory mapping 4-18 

defining memory type to emulator 4-18 

for getting started program 2-11 

function codes 4-18 

internal ROM 4-19 

sequence of map/load commands 4-20 
Memory search 2-27 
Mnemonic display format 2-15 
Monitor 

select foreground/background monitor 4-10 
monitor program 1-6 

background 1-7 

foreground 1-7 
Monitors 

background A-l 
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comparison of foreground/background A-l 
mx Command 2-15 

N notes 

foreground monitor is written for RASM77 A-3 

P Predefining stack pointer 4-14 

Prerequisites for using the emulator 2-2 
Processor clock selection 4-11 
Program loads 2-12 
Program tracing 2-22 
Prompts 

emulator command 2-17 
Purpose of the Emulator 1-1 

R r Command 2-18 
Real-time runs 

restricting emulator to 4-15 
Refresh cycles 

enable/disable tracing refresh cycles 4-17 
reg Command 2-18 
Register Display 2-18 
REGISTERS syntax B-8 
Restrict to real time runs 4-15 

permissible commands 4-15 

target system dependency 4-16 
Restrictions 

Analyzer 2-29 
rst Command 2-17 

S s Command 2-20 

unavailable with foreground monitor A-6 
Sample programs 

for getting started 2-3 
ser Command 2-27 
SFR 4-20 

displaying without suspending user program 2-20 

modify/display 2-19 
Shrink DIP package 3-4 
single step 2-20 

disassembled mnemonic and mx command 2-20 

limitation 2-21 
Software breakpoints 2-25, 4-22 
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defining in target ROM 2-25 
stack pointer 1-10, 4-24 

predefining 4-14 
Starting a trace 2-22 
stop mode 1-10 
Storage qualifier 2-22 
supported microprocessors 1-3 

Syntax (command), specific to 7700 Series emulator B-l 
System commands 4-2 

T t Command 2-22 

Target system dependency on executing code 4-16 
Target system interrupts 

enable/disable 4-12 
Target system probe 

cautions for installation 3-2 

installation 3-2 

installation procedure 3-3 
tf Command 2-22 
tg Command 2-22 
th Command 2-24 
tl Command 2-23 
Trace list display 2-23 
Trace list format 2-22 
Tracing program execution 2-22 
Transfer utility 2-13 
Transparent mode 2-13 
Trigger signals 

break upon 4-22 
tsto Command 2-22 
Types of configuration 4-1 

W wait mode 1-10 
watch dog timer 

enable/disable 4-14 

in background monitor 4-23 

X xp Command 2-13 
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